CVE-2023-1097

Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party analyst and have been confirmed exploitable special thanks to Lionel Musonza for the discovery.

• CWE-94
• CWE-77

• https://community.na.baicells.com/t/baice-bm-2-5-26-new-cpe-software-has-been-released/1756Release Notes
• https://img.baicells.com//Upload/20220524/FILE/BaiCE_BM_2.5.26_NA.bin.binProduct
• https://community.na.baicells.com/t/baice-bm-2-5-26-new-cpe-software-has-been-released/1756Release Notes
• https://img.baicells.com//Upload/20220524/FILE/BaiCE_BM_2.5.26_NA.bin.binProduct

Published

Mar 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1091Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-1092The OAuth Single Sign On Free WordPress plugin before 6.24.2…6.5
• CVE-2023-1093The OAuth Single Sign On WordPress plugin before 6.24.2 does…6.5
• CVE-2023-1094MonicaHQ version 4.0.0 allows an authenticated remote attack…8.8
• CVE-2023-1095In nf_tables_updtable, if nf_tables_table_enable returns an …5.5
• CVE-2023-1096SnapCenter versions 4.7 prior to 4.7P2 and 4.8 prior to 4.8P…9.8
• CVE-2023-1098An information disclosure vulnerability has been discovered …4.9
• CVE-2023-1099A vulnerability was found in SourceCodester Online Student M…9.8
• CVE-2023-1100A vulnerability classified as critical has been found in Sou…9.8
• CVE-2023-1101SonicOS SSLVPN improper restriction of excessive MFA attempt…8.8
• CVE-2023-1103Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-1104Cross-site Scripting (XSS) - Stored in GitHub repository fla…5.4