CVE-2023-23772 — Motorola / MBTS Site Controller

CVE-2023-23772

Motorola / MBTS Site Controller PUBLISHED

Description (CNA)

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.

Affected (CNA)

Vendor / product	Versions
Motorola / MBTS Site Controller	affected R05.32.58

CWE

CWE-347

References

https://tetraburst.com/

ADP enrichment

CVE

No English description supplied.

https://tetraburst.com/

CISA-ADP

No English description supplied.

No references supplied.