CVE-2023-23774highCWE-248

CVE-2023-23774: high-severity vulnerability in Motorola EBTS/MBTS Base Radio

Published · Updated

Follow this CVE+ Monitor EBTS/MBTS Base Radio

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.4epss 0.2%
Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:L/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H
Affected products
Motorola · EBTS/MBTS Base Radio
Related CVEs — Motorola EBTS/MBTS Base Radio

In the same product, most dangerous first.

CVE-2023-23773HIGHCVE-2023-23773EPSS 0.5%