CVE-2023-23773: High severity motorola ebts base radio firmware vulnerability
Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the Motorola EBTS/MBTS Base Radio firmware?
The vulnerability ID is CVE-2023-23773.
What is the severity rating for CVE-2023-23773?
The severity rating for CVE-2023-23773 is 8.8 (High).
What is the affected software for CVE-2023-23773?
The affected software for CVE-2023-23773 includes Motorola EBTS Base Radio Firmware version r05.x2.57 and Motorola MBTS Base Radio Firmware version r05.x2.57.
What are the potential impacts of CVE-2023-23773?
The potential impacts of CVE-2023-23773 include arbitrary code execution, extraction of secret key material, and the ability for an attacker to leave a persistent implant.
Is there a fix available for CVE-2023-23773?
Currently, no fix is available for CVE-2023-23773. It is recommended to follow the vendor's security advisory for updates and mitigation strategies.