Lucene search

NCSC-NLCVELIST:CVE-2023-23770

HistoryAug 29, 2023 - 8:47 a.m.

CVE-2023-23770

2023-08-2908:47:13

CWE-259

NCSC-NL

www.cve.org

cve-2023-23770

motorola

mbts

site controller

backdoor password

vulnerability

man machine interface

hard-coded

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:L/MI:H/MA:H

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.1%

JSON

Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface (MMI), allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled.

CNA Affected

[
  {
    "vendor": "Motorola",
    "product": "MBTS Site Controller",
    "versions": [
      {
        "version": "R05.32.58",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

tetraburst.com/

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:L/MI:H/MA:H

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.1%

JSON

Related for CVELIST:CVE-2023-23770