CVE-2023-1097

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party analyst and have been confirmed exploitable special thanks to Lionel Musonza for the discovery.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94 CWE-77

Affected software

No affected versions have been published.

Timeline

Published: Mar 1, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-10984.9An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all ver CVE-2023-10999.8A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is s CVE-2023-11009.8A vulnerability classified as critical has been found in SourceCodester Online Catering Reservation System 1.0. This affects an unknown part CVE-2023-11018.8SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.CVE-2023-11045.4Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.CVE-2023-11058.1External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3.CVE-2023-11066.1Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3.CVE-2023-11075.4Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.CVE-2023-11087.5A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslCo CVE-2023-11098.8In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files CVE-2023-11105.4The Yellow Yard Searchbar WordPress plugin before 2.8.12 does not validate and escape some of its shortcode attributes before outputting the CVE-2023-11114.8A vulnerability was found in FastCMS up to 0.1.5 and classified as problematic. Affected by this issue is some unknown functionality of the