CVE-2023-6198: Hard Coded Credential

Published Jun 25, 2024

Updated

Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 (User Passwords modules) allows unauthorized access to the device.

Affected Software

1 affected component

Baicells Snap Router

Remediation

Information

Upgrade EP3011 to version BaiCE_BMI_1.3.5.10_NAC or newer to resolve issue.

Event History

Jun 25, 2024

CVE Published

via MITRE·01:34 AM

Data Sourced

via MITRE·01:34 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-6198?

CVE-2023-6198 is considered a high severity vulnerability due to its potential to allow unauthorized access to the Baicells Snap Router.

How do I fix CVE-2023-6198?

To mitigate CVE-2023-6198, it is recommended to change the hard-coded credentials and update the device with the latest firmware.

What devices are affected by CVE-2023-6198?

CVE-2023-6198 specifically affects the Baicells Snap Router BaiCE_BMI on the EP3011 model.

What is the nature of the vulnerability in CVE-2023-6198?

The vulnerability in CVE-2023-6198 involves the use of hard-coded credentials that can lead to unauthorized access to the device.

Is there a patch available for CVE-2023-6198?

Yes, a patch may be available from Baicells, and users should check for firmware updates to address CVE-2023-6198.