Cyber Resilience

CVE-2023-24022

Critical

Published: 26 January 2023

Published
26 January 2023
Modified
21 November 2024
KEV Added
Patch
CVSS Score v3.1 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
EPSS Score 0.0083 75.0th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-24022 is a critical-severity Improper Access Control (CWE-284) vulnerability in Baicells Rtd Firmware. Its CVSS base score is 10.0 (Critical).

Operationally, ranked in the top 25.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 have hardcoded credentials that are easily discovered and can be used by remote attackers to authenticate via ssh. (The credentials are stored in…

more

the firmware, encrypted by the crypt function.)

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

baicells
rtd firmware
≤ 3.7.11.6
baicells
rts firmware
≤ 3.7.11.6

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-284 CWE-798

Security training teaches access control policies and enforcement, reducing improper access control implementations.

addresses: CWE-284 CWE-798

Authorization servers centrally manage access rights, preventing improper access control.

addresses: CWE-284 CWE-798

Central management enforces consistent access-control policies across systems, reducing the likelihood of missing or inconsistent enforcement.

addresses: CWE-284 CWE-798

Resources allocated to security programs enable proper design, implementation, and maintenance of access control mechanisms.

addresses: CWE-284 CWE-798

Screening criteria tied to position sensitivity limit the set of individuals who can be granted access, shrinking the attack surface for improper access control weaknesses.

addresses: CWE-284 CWE-798

Threat hunting directly searches for indicators of unauthorized access or control violations that bypassed preventive mechanisms.

addresses: CWE-284 CWE-798

Defining security roles/responsibilities and integrating risk management into the SDLC directly reduces improper access control by ensuring access decisions are designed and reviewed throughout development.

addresses: CWE-284 CWE-798

Guidance on effective use of access control mechanisms and known configuration vulnerabilities makes improper access control harder to exploit.

References