CVE-2023-23906

Опубликовано: 10 мая 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to execute some critical functions without authentication, e.g., rebooting the product.

Ссылки

https://jvn.jp/en/jp/JVN40604023/
Third Party Advisory
https://www.seiko-sol.co.jp/archives/73969/
Vendor Advisory
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/
Product
https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
Product
https://jvn.jp/en/jp/JVN40604023/
Third Party Advisory
https://www.seiko-sol.co.jp/archives/73969/
Vendor Advisory
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/
Product
https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:seiko-sol:skybridge_mb-a110_firmware:*:*:*:*:*:*:*:*

Версия до 4.2.0 (включая)

cpe:2.3:h:seiko-sol:skybridge_mb-a110:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:seiko-sol:skybridge_mb-a100_firmware:*:*:*:*:*:*:*:*

Версия до 4.2.0 (включая)

cpe:2.3:h:seiko-sol:skybridge_mb-a100:-:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00907

Низкий

7.5 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

GHSA-w9q9-jw2h-8gp3