CVE-2023-23772 — HIGH (7.2)

Vulnerability Description

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Motorola	Mbts Site Controller Firmware	r05.32.58
Motorola	Mbts Site Controller	-

Related Weaknesses (CWE)

CWE-347

References

https://tetraburst.com/Not Applicable
https://tetraburst.com/Not Applicable

FAQ

What is CVE-2023-23772?

CVE-2023-23772 is a vulnerability with a CVSS score of 7.2 (HIGH). Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenti...

How severe is CVE-2023-23772?

CVE-2023-23772 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-23772?

Check the references section above for vendor advisories and patch information. Affected products include: Motorola Mbts Site Controller Firmware, Motorola Mbts Site Controller.