Show filters
16 Total Results
Displaying 11-16 of 16
Sort by:
Attacker Value
Unknown

CVE-2023-22361

Disclosure Date: May 10, 2023 (last updated October 08, 2023)
Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker to alter a WebUI password of the product.
Attacker Value
Unknown

CVE-2022-36560

Disclosure Date: August 29, 2022 (last updated February 24, 2025)
Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded passcodes for root. Attackers are able to access the passcodes at /etc/srapi/config/system.conf and /usr/sbin/ssol-sshd.sh.
Attacker Value
Unknown

CVE-2022-36559

Disclosure Date: August 29, 2022 (last updated February 24, 2025)
Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain a command injection vulnerability via the Ping parameter at ping_exec.cgi.
Attacker Value
Unknown

CVE-2022-36558

Disclosure Date: August 29, 2022 (last updated February 24, 2025)
Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account. Attackers are able to access the passcord via the file /etc/ciel.cfg.
Attacker Value
Unknown

CVE-2022-36557

Disclosure Date: August 29, 2022 (last updated February 24, 2025)
Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file.
Attacker Value
Unknown

CVE-2022-36556

Disclosure Date: August 29, 2022 (last updated February 24, 2025)
Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08execute_ping_01.