CVE-2023-25070

Опубликовано: 10 мая 2023

Источник: nvd

CVSS3: 6.5

CVSS3: 4.8

EPSS Низкий

Описание

Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator's communication to the product.

Ссылки

https://jvn.jp/en/jp/JVN40604023/
Third Party Advisory
https://www.seiko-sol.co.jp/archives/73969/
Vendor Advisory
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/
Product
https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
Product
https://jvn.jp/en/jp/JVN40604023/
Third Party Advisory
https://www.seiko-sol.co.jp/archives/73969/
Vendor Advisory
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/
Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/
Product
https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:seiko-sol:skybridge_mb-a110_firmware:*:*:*:*:*:*:*:*

Версия до 4.2.0 (включая)

cpe:2.3:h:seiko-sol:skybridge_mb-a110:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:seiko-sol:skybridge_mb-a100_firmware:*:*:*:*:*:*:*:*

Версия до 4.2.0 (включая)

cpe:2.3:h:seiko-sol:skybridge_mb-a100:-:*:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.0026

Низкий

6.5 Medium

CVSS3

4.8 Medium

CVSS3

Дефекты

CWE-319

Связанные уязвимости

GHSA-ww2f-6g2m-fwjx

CVSS3: 6.5

github

больше 2 лет назад

EPSS

Процентиль: 49%

0.0026

Низкий

6.5 Medium

CVSS3

4.8 Medium

CVSS3

Дефекты

CWE-319