Firmware Update Vulnerability in Motorola MBTS Site Controller

CVE-2023-23772

What is CVE-2023-23772?

The Motorola MBTS Site Controller suffers from a significant vulnerability due to its failure to validate the authenticity of firmware updates. This flaw enables an authenticated attacker to bypass security measures, potentially leading to arbitrary code execution on the device. Moreover, the lack of cryptographic signature validation poses an increased risk, allowing attackers to extract sensitive key material or implant persistent malware. Organizations using this device should immediately assess their security posture to mitigate potential exploitation.

References