Nova 430H Enodeb Model Pbs3101Sh
Monthly
Malformed uplink signaling during connection setup can break the signaling association between a Baicells Nova 430H eNodeB (model pBS3101SH) and its core network, producing a temporary, cell-wide service outage until connectivity is re-established. An unauthenticated attacker within radio range - using equipment capable of emulating UE uplink traffic - can inject an invalid NAS payload that the eNodeB fails to validate before forwarding it to the core, which then tears down the signaling association; no credentials or user interaction are required. The condition affects BaiBLQ_3.0.12 and earlier, but the requirement for RF/radio-frequency proximity keeps this a bounded, localized availability threat rather than an internet-scale one, and no public exploit code has been identified at time of analysis.
Malformed uplink signaling during connection setup can break the signaling association between a Baicells Nova 430H eNodeB (model pBS3101SH) and its core network, producing a temporary, cell-wide service outage until connectivity is re-established. An unauthenticated attacker within radio range - using equipment capable of emulating UE uplink traffic - can inject an invalid NAS payload that the eNodeB fails to validate before forwarding it to the core, which then tears down the signaling association; no credentials or user interaction are required. The condition affects BaiBLQ_3.0.12 and earlier, but the requirement for RF/radio-frequency proximity keeps this a bounded, localized availability threat rather than an internet-scale one, and no public exploit code has been identified at time of analysis.