CVE-2022-24693

—

CVSS 3.1

9.8 critical

EPSS

3%p88

Published

Mar 30, 2022 (Mar 30, 2022)

Modified

Jun 17, 2026

Description

Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. (The credentials are stored in the firmware, encrypted by the crypt function.)

Vendors: baicells
Products: nova436q firmware, neutrino 430 firmware
Weakness: CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.3%)

In the news0 stories

No ingested article mentions this CVE yet.