CVE-2023-25070
published 2023-05-10CVE-2023-25070: Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote…
PriorityP336medium6.5CVSS 3.1
AVNACLPRNUINSUCLILAN
EPSS
0.51%
39.4th percentile
Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator's communication to the product.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| seiko-sol | skybridge_mb-a100_firmware | <= 4.2.0 | — |
| seiko-sol | skybridge_mb-a110_firmware | <= 4.2.0 | — |
| seiko_solutions_inc | skybridge_mb-a100_110 | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://jvn.jp/en/jp/JVN40604023/https://www.seiko-sol.co.jp/archives/73969/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/https://jvn.jp/en/jp/JVN40604023/https://www.seiko-sol.co.jp/archives/73969/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
2023-05-10
Published