CVE-2023-23774
Summary
| CVE | CVE-2023-23774 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-08-29 09:15:00 UTC |
| Updated | 2023-11-07 04:07:00 UTC |
| Description | Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device. |
Risk And Classification
Problem Types: CWE-755
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Motorola | Ebts Site Controller | - | All | All | All |
| Operating System | Motorola | Ebts Site Controller Firmware | - | All | All | All |
| Hardware | Motorola | Mbts Site Controller | - | All | All | All |
| Operating System | Motorola | Mbts Site Controller Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| tetraburst.com | MISC | tetraburst.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.