CVE-2022-24693: Critical severity baicells nova436q vulnerability
Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. (The credentials are stored in the firmware, encrypted by the crypt function.)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-24693?
CVE-2022-24693 has a high severity due to the presence of hardcoded credentials allowing remote attackers to authenticate via SSH.
How do I fix CVE-2022-24693?
To mitigate CVE-2022-24693, update the firmware of Baicells Nova436Q and Neutrino 430 devices to a version greater than QRTB 2.7.8.
Which devices are affected by CVE-2022-24693?
CVE-2022-24693 affects Baicells Nova436Q and Neutrino 430 devices running firmware up to QRTB 2.7.8.
What are the potential impacts of CVE-2022-24693?
The potential impacts of CVE-2022-24693 include unauthorized access and control over the affected devices due to hardcoded credentials.
Is there a workaround for CVE-2022-24693 if I cannot update the firmware immediately?
Currently, there is no recommended workaround for CVE-2022-24693 other than applying the firmware update as soon as possible.