Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-23772

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages,

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC-NL

Description

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Motorola MBTS Site Controller

Default version status: unknown

  • R05.32.58affected

References