High severity8.1NVD Advisory· Published Feb 11, 2023· Updated Jun 17, 2026

CVE-2023-0776

Description

Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Baicells/Neutrino 430 Firmware
cpe:2.3:o:baicells:neutrino_430_firmware:*:*:*:*:*:*:*:*
Range: <=qrtb_2.12.7
Baicells/Nova430e Firmware
cpe:2.3:o:baicells:nova430e_firmware:*:*:*:*:*:*:*:*
Range: <=qrtb_2.12.7
Baicells/Nova430l Firmware
cpe:2.3:o:baicells:nova430l_firmware:*:*:*:*:*:*:*:*
Range: <=qrtb_2.12.7
Baicells/Nova436q Firmware
cpe:2.3:o:baicells:nova436q_firmware:*:*:*:*:*:*:*:*
Range: <=qrtb_2.12.7
Baicells/Neutrino 430 LTE TDD eNodeBllm-create
Range: <=QRTB 2.12.7
Baicells/Nova 436Qllm-fuzzy2 versions
<=QRTB 2.12.7+ 1 more
- (no CPE)range: <=QRTB 2.12.7
- (no CPE)range: 0
Baicells/Nova 430Ellm-fuzzy3 versions
<=QRTB 2.12.7+ 2 more
- (no CPE)range: <=QRTB 2.12.7
- (no CPE)range: 0
- (no CPE)range: 0
Baicells/Neutrino 430cpe-rescue
Range: 0

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2023-0776

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions