CVE-2026-96274
Uncaught exception in Baicells Nova 430H
- State
- Published
- Severity
- 8.3 High
- Published
- Sep 29, 2026
- Updated
- Sep 29, 2026
- Reserved
- Sep 22, 2026
Description
In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdown of the signaling association for the cell. This results in a temporary service disruption until the eNodeB and core network re-establish connectivity.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.3 High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H | icscert |
| 3.1 | 7.4 High | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H | icscert |
Weaknesses
- CWE-248 Uncaught exception
Affected Products
| Product | Versions |
|---|---|
Nova 430H eNodeB (model pBS3101SH)Baicells |
|
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-04government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.