← Back

CVE-2023-23774

nvd nist
Published: Aug 29, 2023Modified: Jun 17, 2026

JSON object

Loading...
8.4
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.5 / Impact: 5.9
Source: NVD

Description

Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device.

Affected (2)

Motorola
2 products
Ebts Site Controller Firmware
Mbts Site Controller Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ebts Site Controller Firmware
All versions
Running on/withPlatform Versions
Motorola
Ebts Site Controller
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mbts Site Controller Firmware
All versions
Running on/withPlatform Versions
Motorola
Mbts Site Controller
All versions

Related CWEs

CWE-248
Uncaught Exception
An exception is thrown from a function, but it is not caught.
CWE-755
Improper Handling of Exceptional Conditions
The product does not handle or incorrectly handles an exceptional condition.

References (2)

Source: cert@ncsc.nl
Not Applicable
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable

Timeline

No history available yet.