PT-2023-18499 · Seiko Solutions · Seiko Solutions Skybridge Mb-A200+1

Samy Younsi

+1

·

Publicado

2023-05-10

·

Atualizado

2025-01-28

·

CVE-2023-22441

CVSS v3.1

8.6

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Name of the Vulnerable Software and Affected Versions Seiko Solutions SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier Seiko Solutions SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier
Description A missing authentication issue for a critical function exists in the Seiko Solutions SkyBridge series, allowing a remote attacker to obtain or alter the product's setting information or execute critical functions without authentication, such as rebooting the product.
Recommendations For Seiko Solutions SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, update to a version later than Ver. 01.00.05 to resolve the issue. For Seiko Solutions SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, update to a version later than Ver. 1.4.1 to resolve the issue. As a temporary workaround, consider restricting access to critical functions that do not require authentication until a patch is available.

Correção

Missing Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2023-22441

Produtos afetados

Seiko Solutions Skybridge Basic Mb-A130
Seiko Solutions Skybridge Mb-A200