CVE-2023-23774: High severity motorola ebts site controller firmware vulnerability
Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-23774?
CVE-2023-23774 is a vulnerability in the Motorola EBTS/MBTS Site Controller firmware that allows an attacker with physical access to trigger an unhandled exception, causing the device to drop to a debug prompt.
How does CVE-2023-23774 affect Motorola EBTS/MBTS Site Controller?
CVE-2023-23774 affects the Motorola EBTS/MBTS Site Controller by exposing a debug prompt on the device's serial port when an unhandled exception occurs.
What is the severity of CVE-2023-23774?
CVE-2023-23774 has a severity rating of 8.4, which is considered high.
How can an attacker exploit CVE-2023-23774?
To exploit CVE-2023-23774, an attacker needs physical access to the device and the ability to trigger an unhandled exception.
Is the Motorola EBTS Site Controller or MBTS Site Controller vulnerable?
The Motorola EBTS Site Controller and MBTS Site Controller are not vulnerable to CVE-2023-23774.