CVE-2023-23901

Опубликовано: 10 мая 2023

Источник: nvd

CVSS3: 6.5

CVSS3: 4.8

EPSS Низкий

Описание

Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, which may allow a remote unauthenticated attacker to eavesdrop on or alter the communication sent to the WebUI of the product.

Ссылки

https://jvn.jp/en/jp/JVN40604023/
Third Party Advisory
https://www.seiko-sol.co.jp/archives/73969/
Vendor Advisory
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/
Product
https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
Product
https://jvn.jp/en/jp/JVN40604023/
Third Party Advisory
https://www.seiko-sol.co.jp/archives/73969/
Vendor Advisory
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/
Product
https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:seiko-sol:skybridge_basic_mb-a130_firmware:*:*:*:*:*:*:*:*

Версия до 1.4.1 (включая)

cpe:2.3:h:seiko-sol:skybridge_basic_mb-a130:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:seiko-sol:skybridge_mb-a200_firmware:*:*:*:*:*:*:*:*

Версия до 01.00.05 (включая)

cpe:2.3:h:seiko-sol:skybridge_mb-a200:-:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.0059

Низкий

6.5 Medium

CVSS3

4.8 Medium

CVSS3

Дефекты

CWE-295

Связанные уязвимости

GHSA-m4jm-xmcc-hjcm

CVSS3: 6.5

github

больше 2 лет назад

EPSS

Процентиль: 69%

0.0059

Низкий

6.5 Medium

CVSS3

4.8 Medium

CVSS3

Дефекты

CWE-295