CVE-2023-23773

HIGH

Motorola EBTS/MBTS Base Radio Firmware - Authenticated Arbitrary Code Execution via Firmware Update

Title source: llm

Description

Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.

References (1)

Core 1

Core References

Not Applicable related

https://tetraburst.com/

Scores

CVSS v3 7.2

EPSS 0.0042

EPSS Percentile 33.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-347

Status published

Products (2)

motorola/ebts_base_radio_firmware r05.x2.57

motorola/mbts_base_radio_firmware r05.x2.57

Published Aug 29, 2023

Tracked Since Feb 18, 2026