CVE-2023-23774CWE-248

Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception

High · published August 29, 2023

CVSS v3.1
8.4
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:L/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.3th percentile
Weakness
CWE-248 · Uncaught Exception
Published
2023-08-29T08:49Z
EPSS history
Timeline
  • 29 AUG 08:49Z
    Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception
    cvelistv5