PRIOn knowledge basePRION:CVE-2023-25070Design/Logic Flaw
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
7 High
AI Score
Confidence
High
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
53.7%
Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator’s communication to the product.
| CPE | Name | Operator | Version |
|---|---|---|---|
| skybridge_mb-a100_firmware | le | 4.2.0 | |
| skybridge_mb-a110_firmware | le | 4.2.0 |
References
jvn.jp/en/jp/JVN40604023/
www.seiko-sol.co.jp/archives/73969/
www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/
www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/
www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/
www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
7 High
AI Score
Confidence
High
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
53.7%