{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["BCE"],"product":"EG7035-M11","vendor":"Baicells","versions":[{"changes":[{"at":"BaiCE_BM_2.5.26","status":"unaffected"}],"lessThanOrEqual":" BCE-ODU-1.0.8","status":"affected","version":"0","versionType":"patch"}]}],"source":"security@baicells.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:baicells:eg7035-m11_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"36273B84-D85D-43E1-92E2-B30F5C68E989","versionEndIncluding":"bce-odu-1.0.8","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:baicells:eg7035-m11:-:*:*:*:*:*:*:*","matchCriteriaId":"3EA6185C-6193-4821-823C-7C6BF54208B9","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Baicells EG7035-M11 devices with firmware through  BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party analyst and have been confirmed exploitable special thanks to Lionel Musonza for the discovery.\n\n\n\n\n\n"}],"id":"CVE-2023-1097","lastModified":"2026-06-17T05:27:06.453","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.5,"impactScore":6.0,"source":"security@baicells.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-1097","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-03-07T15:53:08.611371Z","version":"2.0.3"}}]},"published":"2023-03-01T20:15:11.073","references":[{"source":"security@baicells.com","tags":["Release Notes"],"url":"https://community.na.baicells.com/t/baice-bm-2-5-26-new-cpe-software-has-been-released/1756"},{"source":"security@baicells.com","tags":["Product"],"url":"https://img.baicells.com//Upload/20220524/FILE/BaiCE_BM_2.5.26_NA.bin.bin"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"],"url":"https://community.na.baicells.com/t/baice-bm-2-5-26-new-cpe-software-has-been-released/1756"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"],"url":"https://img.baicells.com//Upload/20220524/FILE/BaiCE_BM_2.5.26_NA.bin.bin"}],"sourceIdentifier":"security@baicells.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"security@baicells.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-77"}],"source":"nvd@nist.gov","type":"Primary"}]}