CVE-2023-23774
High
Description
Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device.
SeverityHigh
CVSS8.4
Exploit probability—
ProductMotorola Ebts Site Controller Firmware
PublishedAug 29, 2023
First seenAug 29, 2023
Weakness typeCWE-248CWE-248
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| motorola ebts_site_controller_firmware | No range specified | — |
| motorola mbts_site_controller_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.