CVE-2026-96274
Awaiting Analysis Awaiting Analysis - Queue

Unauthenticated NAS Payload Leading to Cell Service Disruption in Baicells Nova 430H

Vulnerability report for CVE-2026-96274, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: ICS-CERT

Description

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdown of the signaling association for the cell. This results in a temporary service disruption until the eNodeB and core network re-establish connectivity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-29
Last Modified
2026-09-29
Generated
2026-09-30
AI Q&A
2026-09-29
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
baicells nova_430h *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-248 An exception is thrown from a function, but it is not caught.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Baicells Nova 430H devices. An attacker within radio range can send a malformed message during connection setup that contains an invalid payload. The device fails to validate this payload properly, causing it to forward the message to the core network. This triggers a shutdown of the signaling association for the cell, leading to temporary service disruption until connectivity is re-established.

Detection Guidance

Detection may involve monitoring for malformed uplink messages during connection setup on Baicells Nova 430H devices. Check for unexpected signaling disruptions or shutdowns in the eNodeB logs. No specific commands are provided in the context.

Impact Analysis

If you use Baicells Nova 430H devices, an attacker within radio range could exploit this to cause temporary loss of network service for your cell. This may result in interrupted communications or connectivity issues until the system recovers.

Mitigation Strategies

Apply vendor patches or updates for Baicells Nova 430H to fix payload validation. Restrict unauthorized devices within radio range of the eNodeB. Monitor network traffic for malformed messages and review eNodeB logs for anomalies.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-96274. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart