« Volver al listado

CVE-2023-6198

Estado: AplazadaCrítica (9.3)—

Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCE_BMI on EP3011 (User Passwords modules) allows unauthorized access to the device.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Baicells — Snap Router Baice BMIAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-6198",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-6198",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-06-26T19:19:15.332858Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@baicells.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 9.3,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4.7,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@baicells.com",
      "affectedData": [
        {
          "vendor": "Baicells",
          "modules": [
            "User Passwords"
          ],
          "product": "Snap Router",
          "versions": [
            {
              "status": "affected",
              "version": "1.3.5.6",
              "versionType": "custom",
              "lessThanOrEqual": "BaiCE_BMI_1.3.5.10_NAC"
            }
          ],
          "platforms": [
            "EP3011"
          ],
          "packageName": "BaiCE_BMI",
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:baicells:ep3011_firmware:-:*:*:*:*:*:*:*"
          ],
          "vendor": "baicells",
          "product": "ep3011_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "1.3.5.6",
              "versionType": "custom",
              "lessThanOrEqual": "1.3.5.10"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-06-25T02:15:10.347",
  "references": [
    {
      "url": "https://www.baicells.com",
      "source": "security@baicells.com"
    },
    {
      "url": "https://www.baicells.com",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@baicells.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-798"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCE_BMI on EP3011 (User Passwords modules) allows unauthorized access to the device."
    },
    {
      "lang": "es",
      "value": "El uso de la vulnerabilidad de credenciales codificadas en Baicells Snap Router BaiCE_BMI en EP3011 (módulos de Contraseñas de usuario) permite el acceso no autorizado al dispositivo."
    }
  ],
  "lastModified": "2026-06-17T06:50:17.087",
  "sourceIdentifier": "security@baicells.com"
}