Advisories › Baicells Technologies › ICSA-26-272-04
Baicells Nova 430H: 1 CVE, High 7.4
Summary
CISA reports 1 vulnerability in Baicells Technologies Nova 430H eNodeB (model pBS3101SH). Weakness type: Uncaught Exception. Successful exploitation of this vulnerability could allow an attacker to inject malformed messages which may lead to a denial-of-service condition. Highest CVSS v3 score: 7.4 (High), exploitable from an adjacent network.
What to do: Prioritize: No vendor fix is listed. Follow CISA's recommended practices: keep the devices off the internet, behind firewalls and isolated from business networks, and use secure remote access.
At a glance
- Vendor
- Baicells Technologies
- Products
- Nova 430H eNodeB (model pBS3101SH)
- CVEs
- CVE-2026-96274
- Highest CVSS v3
- 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Highest CVSS v4
- –
- Known exploited (KEV)
- No CVE from this advisory is on the KEV list as of the last refresh
- Sectors (per CISA)
- Communications, Information Technology
- Deployed
- Worldwide
- Vendor HQ
- United States
Vulnerabilities
| CVE | Weakness | CVSS v3 | CVSS v4 | KEV | Description (from advisory) |
|---|---|---|---|---|---|
| CVE-2026-96274 | Uncaught Exception | 7.4 | – | No | In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdown of the signaling association for the cell. This results in a temporary service disruption until the … |
Affected products (1)
- Baicells Technologies Nova 430H eNodeB (model pBS3101SH): <=BaiBLQ_3.0.12
Vendor fixes and mitigations (from advisory)
- No Fix Planned: Baicells has not responded to requests to work with CISA to mitigate this vulnerability. Users of affected versions of Nova 430H eNodeB are invited to contact Baicells customer support for additional information (https://www.baicells.com/contact-us). link
Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.
Sources
This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.