CVE-2023-23770

The CVE-2023-23770 entry concerns Motorola MBTS Site Controller, specifically the Man Machine Interface (MMI), which accepts a hard-coded backdoor password that cannot be changed or disabled. Public records describe this as a high-severity, network-accessible issue with potential for unauthorized...

PT-2023-19193 · Motorola · Motorola Mbts Site Controller

Name of the Vulnerable Software and Affected Versions: Motorola MBTS Site Controller affected versions not specified Description: The Motorola MBTS Site Controller Man Machine Interface MMI accepts a hard-coded backdoor password that cannot be changed or disabled, allowing service technicians to...

PT-2023-19195 · Motorola · Motorola Mbts Site Controller

Name of the Vulnerable Software and Affected Versions: Motorola MBTS Site Controller affected versions not specified Description: The Motorola MBTS Site Controller fails to check firmware update authenticity due to a lack of cryptographic signature validation for firmware update packages. This...

CVE-2023-23774: Uncaught Exception

Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extrac...

CVE-2023-23772: Improper Verification of Cryptographic Signature

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a...

CVE-2023-23770: Use of Hard-coded Password

Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface MMI, allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled...