CVE-2023-22361medium

CVE-2023-22361: medium-severity vulnerability in Seiko Solutions Inc. SkyBridge MB-A100/110

Published 10 May 2023 · Updated 28 Jan 2025

Follow this CVE + Monitor SkyBridge MB-A100/110

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 36%

Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker to alter a WebUI password of the product.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

Seiko Solutions Inc. · SkyBridge MB-A100/110

Related CVEs — Seiko Solutions Inc. SkyBridge MB-A100/110

In the same product, most dangerous first.

CVE-2023-23906HIGHCVE-2023-23906EPSS 1.3%CVE-2023-25072MEDIUMCVE-2023-25072EPSS 0.8%CVE-2023-24586LOWCVE-2023-24586EPSS 0.5%CVE-2023-25070MEDIUMCVE-2023-25070EPSS 0.5%

References

https://jvn.jp/en/jp/JVN40604023/https://www.seiko-sol.co.jp/archives/73969/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/