Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-23772
HistoryAug 29, 2023 - 9:15 a.m.

Input validation

2023-08-2909:15:00
PRIOn knowledge base
www.prio-n.com
1
motorola
mbts
site controller
firmware update
cryptographic signature
validation
arbitrary code execution
secret key material
persistent implant
nvd

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.3%

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.

References

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.3%

Related for PRION:CVE-2023-23772