CVE-2023-6198CWE-798

Hard Coded Credential

Critical · published June 25, 2024

CVSS v3.1
9.3
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

🚨 Hard-coded credentials are leaving the door wide open! The Baicells Snap Router BaiCE_BMI on EP3011 is vulnerable, allowing any unauthorized user to waltz right in. 🔥 Think of it like a hotel that forgot to change the default lock codes — any guest with the old code can stroll right into any room without a reservation! This could lead to absolutely devastating consequences, allowing attackers to gain full control of the device, manipulate settings, and access sensitive data. Imagine a hacker having the keys to your internet highway; they could reroute traffic or even spy on communications — no one wants that!

Put simply

Think of it like a hotel that forgot to change the default lock codes — any guest with the old code can stroll right into any room without a reservation! The hard-coded credentials in the User Passwords module of the Baicells Snap Router BaiCE_BMI make it possible for unauthorized individuals to access and control the device without any authentication.

What to do

This could lead to absolutely devastating consequences, allowing attackers to gain full control of the device, manipulate settings, and access sensitive data. Imagine a hacker having the keys to your internet highway; they could reroute traffic or even spy on communications — no one wants that! It's imperative to change default credentials immediately and patch the device to the latest firmware version available. Additionally, implement a robust password policy to ensure that no weak or easily guessed passwords are in use. You've got this! Take these steps to secure your device and become a true security hero! 🛡️

The record
Technical detail
CVSS v3.1
9.3 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00358 · 28.3th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2024-06-25T01:34Z
EPSS history
Timeline
  • 25 JUN 01:34Z
    Hard Coded Credential
    cvelistv5