// For flags

CVE-2023-23773

 

Severity Score

8.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.

La radio base Motorola EBTS/MBTS no puede verificar la autenticidad del firmware. La radio base MBTS de Motorola carece de validación de firma criptográfica para los paquetes de actualización de firmware, lo que permite a un atacante autenticado obtener la ejecución de código arbitrario, extraer material de clave secreta y/o dejar un implante persistente en el dispositivo.

*Credits: Midnight Blue
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2023-01-17 CVE Reserved
  • 2023-08-29 CVE Published
  • 2024-08-02 CVE Updated
  • 2024-09-04 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-347: Improper Verification of Cryptographic Signature
CAPEC
References (1)
URL Tag Source
https://tetraburst.com Not Applicable
URL Date SRC
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Motorola
Search vendor "Motorola"
 Ebts Base Radio Firmware
Search vendor "Motorola" for product "Ebts Base Radio Firmware"
 r05.x2.57
Search vendor "Motorola" for product "Ebts Base Radio Firmware" and version "r05.x2.57"
-
Affected
in Motorola
Search vendor "Motorola"
 Ebts Base Radio
Search vendor "Motorola" for product "Ebts Base Radio"
--
Safe
Motorola
Search vendor "Motorola"
 Mbts Base Radio Firmware
Search vendor "Motorola" for product "Mbts Base Radio Firmware"
 r05.x2.57
Search vendor "Motorola" for product "Mbts Base Radio Firmware" and version "r05.x2.57"
-
Affected
in Motorola
Search vendor "Motorola"
 Mbts Base Radio
Search vendor "Motorola" for product "Mbts Base Radio"
--
Safe