Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-25184

Опубликовано: 10 мая 2023
Источник: nvd
CVSS3: 7.5
CVSS3: 5.3
EPSS Низкий

Описание

Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product. Affected products and versions are as follows: SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, and SkySpider MB-R210 firmware Ver. 1.01.00 and earlier.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:seiko-sol:skybridge_basic_mb-a130_firmware:*:*:*:*:*:*:*:*
Версия до 1.4.1 (включая)
cpe:2.3:h:seiko-sol:skybridge_basic_mb-a130:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:seiko-sol:skybridge_mb-a200_firmware:*:*:*:*:*:*:*:*
Версия до 01.00.05 (включая)
cpe:2.3:h:seiko-sol:skybridge_mb-a200:-:*:*:*:*:*:*:*
Конфигурация 3

Одновременно

cpe:2.3:o:seiko-sol:skyspider_mb-r210_firmware:*:*:*:*:*:*:*:*
Версия до 1.01.00 (включая)
cpe:2.3:h:seiko-sol:skyspider_mb-r210:-:*:*:*:*:*:*:*

EPSS

Процентиль: 70%
0.00646
Низкий

7.5 High

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-521
CWE-521

Связанные уязвимости

github логотип

GHSA-rq6m-h9wr-jfpr

CVSS3: 7.5
github
больше 2 лет назад

Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product. Affected products and versions are as follows: SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, and SkySpider MB-R210 firmware Ver. 1.01.00 and earlier.

EPSS

Процентиль: 70%
0.00646
Низкий

7.5 High

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-521
CWE-521