CVE-2023-23771

Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface MMI, allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled...

Design/Logic Flaw

Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent impla...

Hardcoded credentials

Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface MMI, allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled...

CVE-2023-23773

Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent impla...

CVE-2023-23773

The CVE-2023-23773 entry concerns Motorola MBTS/EBTS Base Radio firmware: the update packages lack cryptographic signature validation, enabling an authenticated attacker to achieve arbitrary code execution, potentially extract secret key material, and leave a persistent implant on the device. Roo...

CVE-2023-23773

Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent impla...

CVE-2023-23771

Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface MMI, allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled...

CVE-2023-23771

Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface MMI, allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled...

CVE-2023-23771

The CVE-2023-23771 entry concerns Motorola MBTS Base Radio. The vulnerability is in the Man Machine Interface (MMI) where a hard-coded backdoor password is accepted for service technicians to diagnose and configure the device, and this password cannot be changed or disabled. This creates potentia...

PT-2023-19196 · Motorola · Motorola Ebts/Mbts Base Radio

Name of the Vulnerable Software and Affected Versions: Motorola EBTS/MBTS Base Radio affected versions not specified Description: The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution...

Motorola MBTS Site Controller 信任管理问题漏洞

The Motorola MBTS Site Controller is a device from Motorola, Inc. that is used to manage and control a Macro Base Transceiver Station MBTS and its associated functions. A security vulnerability exists in the Motorola MBTS Site Controller that originates from the acceptance of hard-coded backdoor...

Motorola MBTS Site Controller 安全漏洞

The Motorola EBTS Base Radio and Motorola MBTS Site Controller are both products of Motorola, U.S.A. The Motorola EBTS Base Radio is a walkie-talkie.The Motorola MBTS Site Controller is a The Motorola EBTS/MBTS Site Controller is a device used to manage and control a Macro Base Transceiver Statio...

PT-2023-19194 · Motorola · Motorola Mbts Base Radio

Name of the Vulnerable Software and Affected Versions: Motorola MBTS Base Radio affected versions not specified Description: The Motorola MBTS Base Radio Man Machine Interface MMI accepts a hard-coded backdoor password that cannot be changed or disabled, allowing service technicians to diagnose a...

Motorola MBTS Base Radio 信任管理问题漏洞

The Motorola MBTS Base Radio is a walkie-talkie from Motorola USA. A security vulnerability exists in the Motorola MBTS Base Radio that stems from the acceptance of hard-coded backdoor passwords...

Motorola MBTS Base Radio和Motorola EBTS Base Radio 数据伪造问题漏洞

The Motorola MBTS Base Radio and Motorola EBTS Base Radio are walkie-talkies from Motorola, USA. A security vulnerability exists in the Motorola MBTS Base Radio and Motorola EBTS Base Radio that stems from an inability to check the authenticity of the firmware, allowing an authenticated attacker ...

CVE-2020-22628

A flaw was found in the libraw library. This issue occurs due to an out-of-bounds read vulnerability that exists within the "LibRaw::stretch" function libraw\src\postprocessing\aspectratio.cpp when parsing a crafted CRW file. Mitigation Mitigation for this issue is either not available or the...

Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to arbitrary code execution due to an unsafe deserialization flaw (CVE-2022-40609).

Summary IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ used by IBM i are vulnerable to an attacker executing arbitrary code due to an unsafe deserialization flaw as described in the vulnerability details section. The vulnerability is fixed by applying an IBM i Group PTF for...

Malicious code in eslint-config-web3-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e23c591b583354dc45114b2ff42008dd281f6a57772a8f5f59a249ab89f2fd84 The OpenSSF Package Analysis project identified 'eslint-config-web3-base' @ 0.1.2 npm as malicious. It is considered malicious because: - The...

MAL-2023-7905 Malicious code in eslint-config-web3-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e23c591b583354dc45114b2ff42008dd281f6a57772a8f5f59a249ab89f2fd84 The OpenSSF Package Analysis project identified 'eslint-config-web3-base' @ 0.1.2 npm as malicious. It is considered malicious because: - The...

SUSE SLED12: gstreamer-plugins-base / gstreamer-plugins-base-devel / etc (SUSE-SU-2023:3402-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3402-1 advisory. - The patch for CVE-2023-37328 is removed because it was added by mistake and the package has never been affected by th...