Summaryinfo

A vulnerability, which was classified as critical, has been found in Motorola MBTS Site Controller. This issue affects some unknown processing of the component Debug Prompt Handler. The manipulation leads to an unknown weakness. The identification of this vulnerability is CVE-2023-23774. It is possible to launch the attack on the physical device. There is no exploit available. Once again VulDB remains the best source for vulnerability data.

Detailsinfo

A vulnerability classified as critical was found in Motorola MBTS Site Controller (version now known). This vulnerability affects some unknown processing of the component Debug Prompt Handler. The CWE definition for the vulnerability is CWE-755. The product does not handle or incorrectly handles an exceptional condition. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device.

The weakness was presented 08/29/2023. This vulnerability was named CVE-2023-23774 since 01/17/2023. The technical details are unknown and an exploit is not available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Motorola

Name

• MBTS Site Controller

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion