CVE-2023-23772

HIGH

Motorola MBTS Site Controller Firmware - Authenticated Arbitrary Code Execution via Unsigned Firmware Update

Title source: llm

Description

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.

References (1)

Core 1

Core References

Not Applicable related

https://tetraburst.com/

Scores

CVSS v3 7.2

EPSS 0.0042

EPSS Percentile 33.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-347

Status published

Products (1)

motorola/mbts_site_controller_firmware r05.32.58

Published Aug 29, 2023

Tracked Since Feb 18, 2026