Baicells
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846 | 3 | – | Sep 9, 2025 |
| Nova 233 | 2 | – | Jan 24, 2023 |
| NEUTRINO430, NOVA436Q, NOVA430e/430i, NOVA846, NOVA246, NOVA243, NOVA233, NOVA227 | 2 | – | Sep 9, 2025 |
| Nova 227 | 2 | – | Jan 24, 2023 |
| NEUTRINO430 | 1 | – | Sep 9, 2025 |
| Nova 243 | 1 | – | Jan 24, 2023 |
| Nova 246 | 1 | – | Jan 24, 2023 |
| Nova 430E | 1 | – | Feb 10, 2023 |
| Nova 430H eNodeB (model pBS3101SH) | 1 | – | Sep 29, 2026 |
| Nova 430I | 1 | – | Feb 10, 2023 |
| Nova 436Q | 1 | – | Feb 10, 2023 |
| Snap Router | 1 | – | Jun 25, 2024 |
| EG3661M | 1 | – | Aug 14, 2026 |
| SPECTRA LTE-U eNB | 1 | – | Sep 9, 2025 |
| EG7035-M11 | 1 | – | Mar 1, 2023 |
| EG7035E-M11 | 1 | – | Sep 9, 2025 |
| Neutrino 430 | 1 | – | Feb 10, 2023 |
Exploited and recent CVEs
- CVE-2026-96274 Uncaught exception in Baicells Nova 430H 0.2%
- CVE-2026-19771 Baicells EG3661M LuCI Web luci os command injection 3.7%
- CVE-2025-55054 CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') 0.2%
- CVE-2025-55053 CWE-328: Use of Weak Hash 0.2%
- CVE-2025-55052 CWE-200 Exposure of Sensitive Information to an Unauthorized Actor 0.3%
- CVE-2025-55051 CWE-1392: Use of Default Credentials 0.3%
- CVE-2025-55050 CWE-1242: Inclusion of Undocumented Features 0.3%
- CVE-2025-55049 Use of Default Cryptographic Key (CWE-1394) 0.3%
- CVE-2025-55048 Multiple CWE-78 0.6%
- CVE-2025-55047 CWE-798 Use of Hard-coded Credentials 0.1%
- CVE-2023-6198 Hard Coded Credential 0.4%
- CVE-2023-1097 Unauthenticated Command Injection EG7035-M11 Series 1.1%
- CVE-2023-0776 Remote Code Execution in Baicells QRTB Platform 1.2%
- CVE-2023-0776 Remote Code Execution in Baicells QRTB Platform 1.2%
- CVE-2023-0776 Remote Code Execution in Baicells QRTB Platform 1.2%
- CVE-2023-0776 Remote Code Execution in Baicells QRTB Platform 1.2%
- CVE-2023-24508 Remote Code Execution in Baicells RTS Platform 1.7%
- CVE-2023-24508 Remote Code Execution in Baicells RTS Platform 1.7%
- CVE-2023-24508 Remote Code Execution in Baicells RTS Platform 1.7%
- CVE-2023-24022 Hard Coded Credential Crypt Vulnerability 1.6%
- CVE-2023-24022 Hard Coded Credential Crypt Vulnerability 1.6%
- CVE-2023-24022 Hard Coded Credential Crypt Vulnerability 1.6%