Vulnerabilities

TI-2023-10544 CVE-2023-25072 · GHSA-4qvj-3p36-qxpv

Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver.

MEDIUM 40

Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00831 Published 2023-05-10 No fix listed CWE-521

TI-2023-10542 CVE-2023-25070 · GHSA-ww2f-6g2m-fwjx

Cleartext transmission of sensitive information in Seiko Solutions Inc. SkyBridge…

LOW 29

Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00507 Published 2023-05-10 No fix listed CWE-319

TI-2023-10204 CVE-2023-24586 · GHSA-ccc3-c3hc-g88x

Cleartext storage of sensitive information in Seiko Solutions Inc. SkyBridge MB-A100/110

LOW 30

Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0055 Published 2023-05-10 No fix listed CWE-312

TI-2023-09704 CVE-2023-23906 · GHSA-w9q9-jw2h-8gp3

Missing authentication in Seiko Solutions Inc. SkyBridge MB-A100/110

MEDIUM 41

Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01302 Published 2023-05-10 No fix listed CWE-306

TI-2023-08623 CVE-2023-22361 · GHSA-8ffh-r455-9955

Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver.

MEDIUM 55

Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.35932 Published 2023-05-10 No fix listed

TI-2022-16871 CVE-2022-36558 · GHSA-f3g2-f685-r373

Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the…

MEDIUM 44

Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00808 Published 2022-08-29 No fix listed CWE-798

TI-2022-16870 CVE-2022-36557 · GHSA-6vc8-7fx9-5jgc

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file…

MEDIUM 44

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01084 Published 2022-08-29 No fix listed CWE-434

TI-2022-16869 CVE-2022-36556 · GHSA-42qc-f87p-hg2h

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command…

MEDIUM 45

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08execute_ping_01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01572 Published 2022-08-29 No fix listed CWE-77

Vulnerabilities

Filters