CVE-2023-23773highCWE-347

CVE-2023-23773: high-severity vulnerability in Motorola EBTS/MBTS Base Radio

Published · Updated

Follow this CVE+ Monitor EBTS/MBTS Base Radio

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 0.5%
Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:N/MAC:L/MPR:H/MUI:N/MS:U/MC:H/MI:H/MA:H
Affected products
Motorola · EBTS/MBTS Base Radio
Related CVEs — Motorola EBTS/MBTS Base Radio

In the same product, most dangerous first.

CVE-2023-23774HIGHCVE-2023-23774EPSS 0.2%