CVE-2023-23901
published 2023-05-10CVE-2023-23901: Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver…
PriorityP338medium6.5CVSS 3.1
AVNACLPRNUINSUCLILAN
EPSS
0.46%
36.3th percentile
Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, which may allow a remote unauthenticated attacker to eavesdrop on or alter the communication sent to the WebUI of the product.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| seiko-sol | skybridge_basic_mb-a130_firmware | <= 1.4.1 | — |
| seiko-sol | skybridge_mb-a200_firmware | <= 01.00.05 | — |
| seiko_solutions_inc | skybridge_mb-a200_and_skybridge_basic_mb-a130 | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://jvn.jp/en/jp/JVN40604023/https://www.seiko-sol.co.jp/archives/73969/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/https://jvn.jp/en/jp/JVN40604023/https://www.seiko-sol.co.jp/archives/73969/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
2023-05-10
Published