Threat database

11 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.4	EPSS 0.2%	CVE-2026-96274Nova 430H eNodeB (model pBS3101SH) · Uncaught exception High7.4EPSS 0.2%2026-09-29CVE Database V5CVE-2026-96274 CVE-2026-96274 affects the Baicells Nova 430H eNodeB (model pBS3101SH). An unauthenticated device within radio range can send a malformed uplink message with an invalid NAS payload during connection setup. The eNodeB improperly validates this payload and forwards it to the core network, causing a shutdown of the signaling association for the cell. This leads to temporary service disruption until connectivity is restored. A patch is available to address this vulnerability. EPSS 0.2%Vulnerability Baicells #cwe-248	CVE Database V5	2026-09-29
High	8.6	EPSS 3.7%	CVE-2026-19771EG3661M · OS Command Injection High8.6EPSS 3.7%2026-08-14CVE Database V5CVE-2026-19771 A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. EPSS 3.7%Vulnerability Baicells	CVE Database V5	2026-08-14
Medium	6.1	EPSS 0.2%	CVE-2025-55054EG7035E-M11 · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in… Medium6.1EPSS 0.2%2025-09-09CVE Database V5CVE-2025-55054 CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') EPSS 0.2%Vulnerability Baicells #cwe-79	CVE Database V5	2025-09-09
Medium	6.5	EPSS 0.2%	CVE-2025-55053NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846 · Use of Weak Hash Medium6.5EPSS 0.2%2025-09-09CVE Database V5CVE-2025-55053 CWE-328: Use of Weak Hash EPSS 0.2%Vulnerability Baicells #cwe-328	CVE Database V5	2025-09-09
Medium	4.3	EPSS 0.3%	CVE-2025-55052NEUTRINO430, NOVA436Q, NOVA430e/430i, NOVA846, NOVA246, NOVA243, NOVA233, NOVA227 · Exposure of Sensitive Information to an Unauthorized Actor in Baicells NEUTRINO430, NOVA436Q,… Medium4.3EPSS 0.3%2025-09-09CVE Database V5CVE-2025-55052 CWE-200 Exposure of Sensitive Information to an Unauthorized Actor EPSS 0.3%Vulnerability Baicells #cwe-200	CVE Database V5	2025-09-09
Critical	10.0	EPSS 0.3%	CVE-2025-55051NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846 · Use of Default Credentials Critical10.0EPSS 0.3%2025-09-09CVE Database V5CVE-2025-55051 CWE-1392: Use of Default Credentials EPSS 0.3%Vulnerability Baicells #cwe-1392	CVE Database V5	2025-09-09
Critical	9.8	EPSS 0.3%	CVE-2025-55050NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846 · CWE-1242 Critical9.8EPSS 0.3%2025-09-09CVE Database V5CVE-2025-55050 CWE-1242: Inclusion of Undocumented Features EPSS 0.3%Vulnerability Baicells #cwe-1242	CVE Database V5	2025-09-09
Critical	9.1	EPSS 0.3%	CVE-2025-55049NEUTRINO430 · CWE-1394 Critical9.1EPSS 0.3%2025-09-09CVE Database V5CVE-2025-55049 Use of Default Cryptographic Key (CWE-1394) EPSS 0.3%Vulnerability Baicells #cwe-1394	CVE Database V5	2025-09-09
Critical	9.8	EPSS 0.6%	CVE-2025-55048NEUTRINO430, NOVA436Q, NOVA430e/430i, NOVA846, NOVA246, NOVA243, NOVA233, NOVA227 · Multiple CWE-78 Critical9.8EPSS 0.6%2025-09-09CVE Database V5CVE-2025-55048 Multiple CWE-78 EPSS 0.6%Vulnerability Baicells #cwe-78	CVE Database V5	2025-09-09
High	8.4	EPSS 0.1%	CVE-2025-55047SPECTRA LTE-U eNB · Use of Hard-coded Credentials High8.4EPSS 0.1%2025-09-09CVE Database V5CVE-2025-55047 CWE-798 Use of Hard-coded Credentials EPSS 0.1%Vulnerability Baicells #cwe-798	CVE Database V5	2025-09-09

Showing 1–11 of 11 results · 1 duplicate CVE record merged