{"id":"CVE-2023-23774","state":"PUBLISHED","title":"Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an ","description":"Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device.","publishedAt":"2023-08-29T08:49:32.508Z","updatedAt":"2024-10-03T13:52:17.494Z","severity":{"score":8.4,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:L/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H","source":"NCSC-NL"},"assigner":"NCSC-NL","products":["Motorola EBTS/MBTS Base Radio"],"affected":[{"vendor":"Motorola","product":"EBTS/MBTS Base Radio","defaultStatus":"unknown","versions":[{"version":"R05.x2.57","status":"affected"}]}],"references":["https://tetraburst.com/"],"weaknesses":["CWE-248"],"ingestedAt":"2026-10-29T20:05:43.909Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/23xxx/CVE-2023-23774.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-23774","state":"PUBLISHED","datePublished":"2023-08-29T08:49:32.508Z","dateUpdated":"2024-10-03T13:52:17.494Z","assignerShortName":"NCSC-NL","assignerOrgId":"cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39","dateReserved":"2023-01-17T22:51:43.265Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device."}],"affected":[{"vendor":"Motorola","product":"EBTS/MBTS Base Radio","defaultStatus":"unknown","versions":[{"version":"R05.x2.57","status":"affected"}]}],"references":[{"url":"https://tetraburst.com/","name":"TETRA:BURST","tags":["related"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:L/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-248","lang":"en","description":"An exception is thrown from a function, but it is not caught","type":"CWE"}]}],"providerMetadata":{"shortName":"NCSC-NL","orgId":"cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39","dateUpdated":"2024-10-03T13:52:17.494Z"},"credits":[{"lang":"en","value":"Midnight Blue","type":"finder"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://tetraburst.com/","name":"TETRA:BURST","tags":["related","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T10:42:25.878Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"motorola","product":"ebts_mbts_base_radio","defaultStatus":"unknown","versions":[{"version":"r05.x2.57","status":"affected"}],"cpes":["cpe:2.3:a:motorola:ebts_mbts_base_radio:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-01T20:36:25.719546Z","id":"CVE-2023-23774","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-01T20:38:30.486Z"}}]}}}