CVE-2023-25070
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
7 High
AI Score
Confidence
High
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
64.4%
Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator’s communication to the product.
| Vendor | Product | Version | CPE |
|---|---|---|---|
| seiko\-sol | skybridge_mb\-a100 | 4.2.0 | cpe:2.3:h:seiko\-sol:skybridge_mb\-a100:4.2.0:*:*:*:*:*:*:* |
References
jvn.jp/en/jp/JVN40604023/
www.seiko-sol.co.jp/archives/73969/
www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/
www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/
www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/
www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
7 High
AI Score
Confidence
High
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
64.4%