CVE-2023-23770

Critical

Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface (MMI), allowing…

NCSC-NL·CWE-259·Published 2023-08-29

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

276 chars

Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface (MMI), allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled.

NVDen

276 chars

NVDes

370 chars

El Controlador de Sitio Motorola MBTS acepta una contraseña de puerta trasera codificada de forma rígida. La Interfaz Hombre-Máquina (MMI) del Controlador de Sitio Motorola MBTS, que permite a los técnicos de servicio diagnosticar y configurar el dispositivo, acepta una contraseña de puerta trasera codificada de forma rígida que no puede ser cambiada ni deshabilitada.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	9.4	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:L/MI:H/MA:H
3.1	Secondary	NVD	9.4	3.9	5.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H