Approved changes feed: RSS · Atom

cpe:2.3:h:seiko-sol:skybridge_mb-a100:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSeiko Sol (032a9d0f-00b4-576e-9980-5b1f60788bb9)
ProductSkybridge Mb A100 (c0837e4f-c0e4-5de8-bb79-4a9c2711ff99)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25072 not_vulnerable 2026-06-08 05:56:08.487678 Details available
Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product.
Published: 2023-05-10T00:00:00.000Z
Updated: 2025-01-28T14:42:41.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25070 not_vulnerable 2026-06-08 05:56:08.483110 Details available
Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator's communication to the product.
Published: 2023-05-10T00:00:00.000Z
Updated: 2025-01-28T14:46:37.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24586 not_vulnerable 2026-06-08 05:56:05.999532 Details available
Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote authenticated attacker to obtain an APN credential for the product.
Published: 2023-05-10T00:00:00.000Z
Updated: 2025-01-28T14:48:12.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23906 not_vulnerable 2026-06-08 05:56:04.676506 Details available
Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to execute some critical functions without authentication, e.g., rebooting the product.
Published: 2023-05-10T00:00:00.000Z
Updated: 2025-01-28T16:35:14.592Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22361 not_vulnerable 2026-06-08 05:54:24.929319 Details available
Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker to alter a WebUI password of the product.
Published: 2023-05-10T00:00:00.000Z
Updated: 2025-01-28T14:55:30.333Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36558 not_vulnerable 2026-06-08 05:46:07.551971 Details available
Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account. Attackers are able to access the passcord via the file /etc/ciel.cfg.
Published: 2022-08-29T22:46:21.000Z
Updated: 2024-08-03T10:07:34.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36557 not_vulnerable 2026-06-08 05:46:07.551494 Details available
Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file.
Published: 2022-08-29T22:46:20.000Z
Updated: 2024-08-03T10:07:34.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36556 not_vulnerable 2026-06-08 05:46:07.549505 Details available
Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08execute_ping_01.
Published: 2022-08-29T22:46:19.000Z
Updated: 2024-08-03T10:07:34.530Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.