CVE-2023-24586

Опубликовано: 10 мая 2023

Источник: nvd

CVSS3: 6.5

CVSS3: 3.1

EPSS Низкий

Описание

Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote authenticated attacker to obtain an APN credential for the product.

Ссылки

https://jvn.jp/en/jp/JVN40604023/
Third Party Advisory
https://www.seiko-sol.co.jp/archives/73969/
Vendor Advisory
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/
Product
https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
Product
https://jvn.jp/en/jp/JVN40604023/
Third Party Advisory
https://www.seiko-sol.co.jp/archives/73969/
Vendor Advisory
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/
Product
https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:seiko-sol:skybridge_mb-a110_firmware:*:*:*:*:*:*:*:*

Версия до 4.2.0 (включая)

cpe:2.3:h:seiko-sol:skybridge_mb-a110:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:seiko-sol:skybridge_mb-a100_firmware:*:*:*:*:*:*:*:*

Версия до 4.2.0 (включая)

cpe:2.3:h:seiko-sol:skybridge_mb-a100:-:*:*:*:*:*:*:*

EPSS

Процентиль: 41%

0.00186

Низкий

6.5 Medium

CVSS3

3.1 Low

CVSS3

Дефекты

CWE-312

Связанные уязвимости

GHSA-ccc3-c3hc-g88x

CVSS3: 6.5

github

больше 2 лет назад

EPSS

Процентиль: 41%

0.00186

Низкий

6.5 Medium

CVSS3

3.1 Low

CVSS3

Дефекты

CWE-312