CVE-2023-6198

Published Jun 25, 2024

Last updated 6 months ago

CVSS critical 9.3
Network

Overview

Description
Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCE_BMI on EP3011 (User Passwords modules) allows unauthorized access to the device.
Source
security@baicells.com
NVD status
Deferred

Risk scores

CVSS 3.1

Type
Secondary
Base score
9.3
Impact score
4.7
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L
Severity
CRITICAL

Weaknesses

security@baicells.com
CWE-798

Social media

Hype score
Not currently trending

Related CVEs

  1. F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability•CVE-2026-94127
  2. Check Point Multiple Products Path Traversal Vulnerability•CVE-2026-93616
  3. Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability•CVE-2026-76460
  4. EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs instead of a cryptographically secure generator. Remote unauthenticated attackers can guess these roughly 31-bit tokens to confirm opt-ins, accept or decline event invitations on behalf of other contacts, and access event details.•CVE-2026-92298
  5. The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command.•CVE-2026-68070

References

Sources include official advisories and independent security research.