Approved changes feed: RSS · Atom

cpe:2.3:h:baicells:eg7035-m11:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorBaicells (a4ef65e9-3be4-547b-bb5c-753cbf164045)
ProductEg7035 M11 (cbfa2be0-1ed6-5c5e-9175-ae067f56b101)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1097 not_vulnerable 2026-06-03 14:48:53.730316 Unauthenticated Command Injection EG7035-M11 Series
CRITICAL (9.3)
Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party analyst and have been confirmed exploitable special thanks to Lionel Musonza for the discovery.
Published: 2023-03-01T19:29:26.456Z
Updated: 2025-03-07T15:53:21.691Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.