Priority MEDIUM 43
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge MB-A100/MB-A110.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.01713 · Published 2026-07-01 · No fix listed CWE-78
Priority MEDIUM 53
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0265 · Published 2025-09-01 · No fix listed CWE-78
Priority MEDIUM 51
Improper neutralization of special elements used in a command ('Command Injection') exists in SkyBridge MB-A100/MB-A110 firmware Ver.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01207 · Published 2024-05-31 · No fix listed CWE-78
Priority MEDIUM 41
Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00997 · Published 2023-05-10 · No fix listed CWE-521
Priority MEDIUM 40
Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00831 · Published 2023-05-10 · No fix listed CWE-521
Priority LOW 29
Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00507 · Published 2023-05-10 · No fix listed CWE-319
Priority LOW 30
Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0055 · Published 2023-05-10 · No fix listed CWE-312
Priority MEDIUM 41
Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01302 · Published 2023-05-10 · No fix listed CWE-306
Priority LOW 29
Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00456 · Published 2023-05-10 · No fix listed CWE-295
Priority MEDIUM 43
Improper access control vulnerability in SkyBridge MB-A200 firmware Ver.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02023 · Published 2023-05-10 · No fix listed CWE-346
Priority MEDIUM 45
Missing authentication for critical function exists in Seiko Solutions SkyBridge series, which may allow a remote attacker to obtain or alter the setting information of the product or execute some critical functions with…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00981 · Published 2023-05-10 · No fix listed CWE-306
Priority MEDIUM 55
Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.35932 · Published 2023-05-10 · No fix listed
Priority MEDIUM 44
Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded passcodes for root.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00808 · Published 2022-08-29 · No fix listed CWE-798
Priority MEDIUM 46
Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain a command injection vulnerability via the Ping parameter at ping_exec.cgi.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01736 · Published 2022-08-29 · No fix listed CWE-77
Priority MEDIUM 44
Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00808 · Published 2022-08-29 · No fix listed CWE-798
Priority MEDIUM 44
Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01084 · Published 2022-08-29 · No fix listed CWE-434
Priority MEDIUM 45
Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08execute_ping_01.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01572 · Published 2022-08-29 · No fix listed CWE-77
THREATIST.IORead the docs