CVE-2023-23774

Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device.
References
Link Resource
https://tetraburst.com/ Not Applicable
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:motorola:ebts_site_controller_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:motorola:ebts_site_controller:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:motorola:mbts_site_controller_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:motorola:mbts_site_controller:-:*:*:*:*:*:*:*

History

03 Oct 2024, 14:15

Type Values Removed Values Added
CWE CWE-703 CWE-248

31 Aug 2023, 00:24

Type Values Removed Values Added
CPE cpe:2.3:o:motorola:mbts_site_controller_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:motorola:ebts_site_controller_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:motorola:mbts_site_controller:-:*:*:*:*:*:*:*
cpe:2.3:h:motorola:ebts_site_controller:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.4
References (MISC) https://tetraburst.com/ - (MISC) https://tetraburst.com/ - Not Applicable
First Time Motorola ebts Site Controller
Motorola ebts Site Controller Firmware
Motorola
Motorola mbts Site Controller
Motorola mbts Site Controller Firmware
CWE CWE-755

29 Aug 2023, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-08-29 09:15

Updated : 2024-10-03 14:15


NVD link : CVE-2023-23774

Mitre link : CVE-2023-23774

CVE.ORG link : CVE-2023-23774


JSON object : View

Products Affected

motorola

  • ebts_site_controller_firmware
  • mbts_site_controller_firmware
  • mbts_site_controller
  • ebts_site_controller
CWE
CWE-755

Improper Handling of Exceptional Conditions

CWE-248

Uncaught Exception