A command injection vulnerability has been identified in Baicells products, specifically in the NEUTRINO430, NOVA436Q, NOVA430e/430i, NOVA846, NOVA246, NOVA243, NOVA233, and NOVA227 models. This vulnerability affects several different versions and stems from improper validation of user input, allowing for the execution of arbitrary commands on the server.
Exploitation of this vulnerability allows for command injection, where an attacker can execute arbitrary commands on the affected device or server.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
