CVE-2023-22361
medium · 6.5Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker to alter a WebUI password of the product.
6.5
CVSS
35.9%
EPSS (exploit prob.)
98th
EPSS percentile
2023-05-10
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| seiko-sol | skybridge_mb-a110_firmware | <= 4.2.0 |
| seiko-sol | skybridge_mb-a110 | all versions |
| seiko-sol | skybridge_mb-a100_firmware | <= 4.2.0 |
| seiko-sol | skybridge_mb-a100 | all versions |
Check a specific version with /api/v1/cve/match.
References
- https://jvn.jp/en/jp/JVN40604023/
- https://www.seiko-sol.co.jp/archives/73969/
- https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/
- https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/
- https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/
- https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
- https://jvn.jp/en/jp/JVN40604023/
- https://www.seiko-sol.co.jp/archives/73969/
- https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/
- https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/
- https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/
- https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-22361