Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-96274— Uncaught exception in Baicells Nova 430H

Quick assessment

Affected
Baicells Nova 430H eNodeB (model pBS3101SH)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Baicells Nova 430H 中，处于无线电覆盖范围内的未认证设备可在连接建立过程中发送一条格式错误的上行消息，该消息包含无效的 NAS（非接入层）负载。由于 eNodeB 未对此负载进行适当验证，它会将该消息转发至核心网络，从而可能触发该小区信令关联的关闭。这将导致临时服务中断，直至 eNodeB 与核心网络重新建立连接。

CVSS 7.4 · High

Affected Version Matrix 1

VendorProduct Version RangeStatus
Baicells Nova 430H eNodeB (model pBS3101SH) ≤ BaiBLQ_3.0.12 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-96274

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Uncaught exception in Baicells Nova 430H
Source: CVE Program / CVE List V5
Vulnerability Description
In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdown of the signaling association for the cell. This results in a temporary service disruption until the eNodeB and core network re-establish connectivity.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未捕获的异常
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Baicells Nova 430H eNodeB (model pBS3101SH) 0 ~ BaiBLQ_3.0.12 -

II. Public POCs for CVE-2026-96274

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-96274

请登录查看更多情报信息。

Other References for CVE-2026-96274 (1)

IV. Related Vulnerabilities

Same vendor: Baicells
Same weakness: CWE-248

V. Comments for CVE-2026-96274

No comments yet

Leave a comment