CVE-2023-23772highCWE-347

CVE-2023-23772: high-severity vulnerability in Motorola MBTS Site Controller

Published · Updated

Follow this CVE+ Monitor MBTS Site Controller

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 0.5%
Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:N/MAC:L/MPR:H/MUI:N/MS:U/MC:H/MI:H/MA:H
Affected products
Motorola · MBTS Site Controller
Related CVEs — Motorola MBTS Site Controller

In the same product, most dangerous first.

CVE-2023-23770CRITICALCVE-2023-23770EPSS 0.5%