Lucene search
+L

189 matches found

CNNVD
CNNVD
added 2023/05/10 12:00 a.m.12 views

Seiko Solutions SkyBridge 安全漏洞

Seiko Solutions SkyBridge is a series of routers from Seiko Solutions, Japan. A security vulnerability exists in Seiko Solutions SkyBridge MB-A200 firmware version 01.00.05 and earlier versions, which stems from improper access control...

7.5CVSS7.6AI score0.02023EPSS
SaveExploits0References7
NVD
NVD
added 2023/04/11 9:15 a.m.28 views

CVE-2023-27520

Cross-site request forgery CSRF vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. Note Web Config is the software that allows...

6.5CVSS6.8AI score0.00314EPSS
SaveExploits0References2
NVD
NVD
added 2023/04/11 9:15 a.m.44 views

CVE-2023-23572

Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPS...

4.8CVSS5AI score0.00499EPSS
SaveExploits0References2
Prion
Prion
added 2023/04/11 9:15 a.m.24 views

Cross site scripting

Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPS...

4.3CVSS5.2AI score0.00499EPSS
SaveExploits0References2
Prion
Prion
added 2023/04/11 9:15 a.m.24 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. Note Web Config is the software that allows...

4.3CVSS6.7AI score0.00314EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/04/11 12:00 a.m.10 views

CVE-2023-23572

Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPS...

4.9AI score0.00499EPSS
SaveExploits0References2
CVE
CVE
added 2023/04/11 12:00 a.m.79 views

CVE-2023-23572

CVE-2023-23572 is a stored cross-site scripting vulnerability in SEIKO EPSON printers’ and network interface Web Config (Remote Manager) affecting the Web Config component pre-installed on some printers/network interfaces. A remote authenticated attacker with administrative privileges can inject ...

4.8CVSS5.2AI score0.00499EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/11 12:00 a.m.12 views

PT-2023-19051 · Seiko Epson · Seiko Epson Printers/Network Interface Web Config

Name of the Vulnerable Software and Affected Versions: SEIKO EPSON printers/network interface Web Config affected versions not specified Description: A cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with administrativ...

4.8CVSS6AI score0.00499EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2023/04/11 12:00 a.m.9 views

CVE-2023-27520

Cross-site request forgery CSRF vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. Note Web Config is the software that allows...

6.7AI score0.00314EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/04/11 12:00 a.m.52 views

CVE-2023-23572

Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPS...

5.8AI score0.00499EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/04/11 12:00 a.m.37 views

CVE-2023-27520

Cross-site request forgery CSRF vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. Note Web Config is the software that allows...

7AI score0.00314EPSS
SaveExploits0References2
CVE
CVE
added 2023/04/11 12:00 a.m.62 views

CVE-2023-27520

The CVE-2023-27520 CSRF vulnerability affects SEIKO EPSON printers’ Web Config (Remote Manager) and can allow a remote unauthenticated attacker to hijack a user’s session by tricksing a logged-in user into visiting a malicious page. The underlying issue is cross-site request forgery in the Web Co...

6.5CVSS6.7AI score0.00314EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/11 12:00 a.m.9 views

PT-2023-21190 · Seiko Epson · Seiko Epson Printers/Network Interface Web Config

Name of the Vulnerable Software and Affected Versions: SEIKO EPSON printers/network interface Web Config affected versions not specified Description: A cross-site request forgery CSRF issue allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by...

6.5CVSS7.1AI score0.00314EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/03/31 12:00 a.m.88 views

JVN#40604023: Multiple vulnerabilities in Seiko Solutions SkyBridge MB-A100/A110/A200/A130 SkySpider MB-R210

SkyBridge MB-A100/A110/A200/A130 SkySpider MB-R210 provided by Seiko Solutions Inc. contain multiple vulnerabilities listed below. Exposure of sensitive information to an unauthorized actor CWE-200 - CVE-2016-2183 Version| Vector| Score ---|---|--- CVSS v3|...

9.8CVSS8.7AI score0.95707EPSS
SaveExploits7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/03/08 12:00 a.m.51 views

JVN#82424996: Multiple vulnerabilities in SEIKO EPSON printers/network interface Web Config

Web Config for printers/network interface provided by SEIKO EPSON CORPORATION contains multiple vulnerabilities listed below. Stored cross-site Scripting CWE-79 - CVE-2023-23572 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.8 CVSS v2|...

6.5CVSS6.5AI score0.00499EPSS
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/01/04 8:45 a.m.16 views

seiko-boutique.de Cross Site Scripting vulnerability OBB-3128174

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2022/12/03 8:11 p.m.14 views

seiko-port-itservice.com Cross Site Scripting vulnerability OBB-3085645

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
added 2022/08/29 11:15 p.m.10 views

CVE-2022-36557

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file...

9.8CVSS6.1AI score0.01054EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/29 11:15 p.m.11 views

CVE-2022-36560

Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded passcodes for root. Attackers are able to access the passcodes at /etc/srapi/config/system.conf and /usr/sbin/ssol-sshd.sh...

9.8CVSS5.8AI score0.00786EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/29 11:15 p.m.7 views

CVE-2022-36559

Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain a command injection vulnerability via the Ping parameter at pingexec.cgi...

9.8CVSS7.3AI score0.01749EPSS
SaveExploits0References3
Rows per page
Query Builder