Critical · published January 24, 2023
🚨 A treasure map to your eNodeB devices! The hardcoded credentials in Baicells' firmware let attackers unlock your system without breaking a sweat. 🔥 Think of it like a restaurant whose menu lists a secret passcode to get into the kitchen! Any savvy diner could breeze in and access the chef’s recipes without anyone batting an eye. If exploited, an attacker could easily authenticate via SSH, gaining complete control over your LTE TDD eNodeB devices. This means they can manipulate settings, intercept communications, and potentially bring your network to a standstill — absolutely devastating for operations!
Think of it like a restaurant whose menu lists a secret passcode to get into the kitchen! Any savvy diner could breeze in and access the chef’s recipes without anyone batting an eye. This vulnerability arises from hardcoded credentials stored in the firmware of Baicells Nova 227, Nova 233, and Nova 243 devices, which are encrypted but easily discoverable. Because these credentials allow SSH access, they present a significant risk if discovered by malicious actors.
If exploited, an attacker could easily authenticate via SSH, gaining complete control over your LTE TDD eNodeB devices. This means they can manipulate settings, intercept communications, and potentially bring your network to a standstill — absolutely devastating for operations! Immediately upgrade your firmware to the latest version that addresses this issue. Review network configurations and disable SSH access if it’s not necessary for your use case. Additionally, consider implementing strong access control measures to mitigate potential risks. You've got this! By following these steps, you can secure your network and keep those bad actors at bay. 🛡️