CVE-2023-23906

2023-05-1000:00:00

jpcert

www.cve.org

authentication

skybridge mb-a100/110

firmware

vulnerability

remote attacker

critical function

AI Score

8.5

Confidence

High

EPSS

0.007

Percentile

81.2%

JSON

Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to execute some critical functions without authentication, e.g., rebooting the product.

CNA Affected

[
  {
    "vendor": "Seiko Solutions Inc.",
    "product": "SkyBridge MB-A100/110",
    "versions": [
      {
        "version": "firmware Ver. 4.2.0 and earlier",
        "status": "affected"
      }
    ]
  }
]