High severity8.1NVD Advisory· Published Jan 26, 2023· Updated Jun 17, 2026

CVE-2023-24508

Description

Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce.

Affected products

Baicells/Rtd Firmware
cpe:2.3:o:baicells:rtd_firmware:*:*:*:*:*:*:*:*
Range: <3.7.11.6
Baicells/Rts Firmware
cpe:2.3:o:baicells:rts_firmware:*:*:*:*:*:*:*:*
Range: <3.7.11.6
Baicells/Nova 227llm-fuzzy
Range: <=RTS/RTD 3.6.6
Baicells/Nova 233llm-fuzzy
Range: <=RTS/RTD 3.6.6
Baicells/Nova 246llm-fuzzy2 versions
<=RTS/RTD 3.6.6+ 1 more
- (no CPE)range: <=RTS/RTD 3.6.6
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMGnvdRelease NotesVendor Advisory
img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdfnvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000