Debug Prompt Exposure in Motorola EBTS/MBTS Site Controller

CVE-2023-23774

Summary

A vulnerability exists in the Motorola EBTS and MBTS Site Controllers that exposes a debug prompt through the device's serial port when an unhandled exception occurs. This condition can result in unauthorized access for an attacker with physical access to the device, allowing them to extract sensitive key material or execute arbitrary code. This poses significant security risks, emphasizing the need for robust physical security measures.

References