PT-2023-19196 · Motorola · Motorola Ebts/Mbts Base Radio

Midnight Blue · Publicado 2023-08-29 · Atualizado 2023-08-31 · CVE-2023-23773

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Motorola EBTS/MBTS Base Radio (affected versions not specified)

Description The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Verification of Cryptographic Signature

Enumeração de Fraquezas

CWE-347

Identificadores relacionados

CVE-2023-23773

Produtos afetados

Motorola Ebts/Mbts Base Radio

Referências · 8

• https://t.me/cibsecurity/69346 · Publicação no Telegram
• https://t.me/cvenotify/57527 · Publicação no Telegram
• https://twitter.com/cracbot/status/1696764737680531816 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1696451609461669973 · Publicação no Twitter
• https://tetraburst.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-23773 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-23773 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1696474409358286996 · Publicação no Twitter