Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product. Affected products and versions are as follows: SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, and SkySpider MB-R210 firmware Ver. 1.01.00 and earlier.
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
History
21 Nov 2024, 07:49
Type | Values Removed | Values Added |
---|---|---|
References | () https://jvn.jp/en/jp/JVN40604023/ - Third Party Advisory | |
References | () https://www.seiko-sol.co.jp/archives/73969/ - Vendor Advisory | |
References | () https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/ - Product | |
References | () https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/ - Product | |
References | () https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/ - Product | |
References | () https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/ - Product |
Information
Published : 2023-05-10 06:15
Updated : 2024-11-21 07:49
NVD link : CVE-2023-25184
Mitre link : CVE-2023-25184
CVE.ORG link : CVE-2023-25184
JSON object : View
Products Affected
seiko-sol
- skybridge_mb-a200_firmware
- skybridge_mb-a200
- skybridge_basic_mb-a130
- skyspider_mb-r210_firmware
- skyspider_mb-r210
- skybridge_basic_mb-a130_firmware
CWE
CWE-521
Weak Password Requirements