Code injection

2023-08-2909:15:00

PRIOn knowledge base

www.prio-n.com

motorola

mbts

site controller

debug

prompt

code injection

risk

physical access

secret key material

arbitrary code execution

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.1%

JSON

Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device’s serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device.

References

tetraburst.com/