skybridge mb-a100 firmware vulnerabilities and fixes

Recent CVEs affecting skybridge mb-a100 firmware, with upgrade or downgrade steps. 8 tracked.

Also searched as: skybridge mb a100 firmware, skybridgemb-a100firmware.

skybridge mb-a100 firmware has 8 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 8. Most recent: 2023-05-10. Highest priority: CVE-2022-36556 (score 58/100).

• CVE-2023-25072 HIGH 7.5 UPGRADE UPGRADE Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver
• CVE-2023-25070 MEDIUM 6.5 UPGRADE UPGRADE Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver
• CVE-2023-24586 MEDIUM 6.5 UPGRADE UPGRADE Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver
• CVE-2023-23906 HIGH 7.5 UPGRADE UPGRADE Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver
• CVE-2023-22361 MEDIUM 6.5 UPGRADE UPGRADE Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver
• CVE-2022-36558 CRITICAL 9.8 UPGRADE UPGRADE Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account
• CVE-2022-36557 CRITICAL 9.8 UPGRADE UPGRADE Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability
• CVE-2022-36556 CRITICAL 9.8 UPGRADE UPGRADE Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via

FAQ

How do I fix skybridge mb-a100 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is skybridge mb-a100 firmware being exploited right now?

None of the tracked skybridge mb-a100 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which skybridge mb-a100 firmware CVE should I patch first?

CVE-2022-36556 currently ranks highest (58/100): Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via .

RSS feed for skybridge mb-a100 firmware · ← Back to latest CVEs