Seiko Sol

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-25184 1Seiko Sol 3Skybridge Basic Mb A130 Firmware Skybridge Mb A200 FirmwareSkyspider Mb R210 Firmware Jan 28, 2025 May 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product. Affected products and versions are as...Show more Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product. Affected products and versions are as follows: SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, and SkySpider MB-R210 firmware Ver. 1.01.00 and earlier.Show less
CVE-2023-25072 1Seiko Sol 2Skybridge Mb A100 Firmware Skybridge Mb A110 Firmware Jan 28, 2025 May 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product.
CVE-2023-25070 1Seiko Sol 2Skybridge Mb A100 Firmware Skybridge Mb A110 Firmware Jan 28, 2025 May 10, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the admini...Show more Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator's communication to the product.Show less
CVE-2023-24586 1Seiko Sol 2Skybridge Mb A100 Firmware Skybridge Mb A110 Firmware Jan 28, 2025 May 10, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote authenticated attacker to obtain an APN credential for the product.
CVE-2023-23906 1Seiko Sol 2Skybridge Mb A100 Firmware Skybridge Mb A110 Firmware Jan 28, 2025 May 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to execute some critical functions without authentication, e...Show more Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to execute some critical functions without authentication, e.g., rebooting the product.Show less
CVE-2023-23901 1Seiko Sol 2Skybridge Basic Mb A130 Firmware Skybridge Mb A200 Firmware Jan 28, 2025 May 10, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, which may allow a remote unauthenticated a...Show more Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, which may allow a remote unauthenticated attacker to eavesdrop on or alter the communication sent to the WebUI of the product.Show less
CVE-2023-23578 1Seiko Sol 1Skybridge Mb A200 Firmware Jan 28, 2025 May 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper access control vulnerability in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier allows a remote unauthenticated attacker to connect to the product's ADB port.
CVE-2023-22441 1Seiko Sol 2Skybridge Basic Mb A130 Firmware Skybridge Mb A200 Firmware Jan 28, 2025 May 10, 2023 N/A· v4 8.6 HIGH· v3 N/A· v2 Missing authentication for critical function exists in Seiko Solutions SkyBridge series, which may allow a remote attacker to obtain or alter the setting information of the product or execute some critical functions with...Show more Missing authentication for critical function exists in Seiko Solutions SkyBridge series, which may allow a remote attacker to obtain or alter the setting information of the product or execute some critical functions without authentication, e.g., rebooting the product. Affected products and versions are as follows: SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlierShow less
CVE-2023-22361 1Seiko Sol 2Skybridge Mb A100 Firmware Skybridge Mb A110 Firmware Jan 28, 2025 May 10, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker to alter a WebUI password of the product.
CVE-2022-36560 1Seiko Sol 1Skybridge Mb A200 Firmware Nov 21, 2024 Aug 29, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded passcodes for root. Attackers are able to access the passcodes at /etc/srapi/config/system.conf and /usr/sbin/ssol-sshd.sh.
CVE-2022-36559 1Seiko Sol 1Skybridge Mb A200 Firmware Nov 21, 2024 Aug 29, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain a command injection vulnerability via the Ping parameter at ping_exec.cgi.
CVE-2022-36558 1Seiko Sol 2Skybridge Mb A100 Firmware Skybridge Mb A110 Firmware Nov 21, 2024 Aug 29, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account. Attackers are able to access the passcord via the file /etc/ciel.cfg.
CVE-2022-36557 1Seiko Sol 2Skybridge Mb A100 Firmware Skybridge Mb A110 Firmware Nov 21, 2024 Aug 29, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted...Show more Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file.Show less
CVE-2022-36556 1Seiko Sol 2Skybridge Mb A100 Firmware Skybridge Mb A110 Firmware Nov 21, 2024 Aug 29, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08execute_ping_01.