Vulnerability · Published Mar 1, 2023 · Assigned by Baicells
CVE-2023-1097Unauthenticated Command Injection EG7035-M11 Series
Critical 9.3
In plain English
A critical-severity code injection in EG7035-M11 from Baicells. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities).
Official description
Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party analyst and have been confirmed exploitable special thanks to Lionel Musonza for the discovery.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Baicells | EG7035-M11 | 0 – through BCE-ODU-1.0.8 |
Weakness: CWE-94 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H