CVE-2023-22361

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker to alter a WebUI password of the product.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected software

Vendor	Product	Versions
Seiko Solutions Inc.	SkyBridge MB-A100/110	firmware Ver. 4.2.0 and earlier

References

https://jvn.jp/en/jp/JVN40604023/Third Party Advisory
https://www.seiko-sol.co.jp/archives/73969/Vendor Advisory
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/Product
https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/Product
https://jvn.jp/en/jp/JVN40604023/Third Party Advisory
https://www.seiko-sol.co.jp/archives/73969/Vendor Advisory
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/Product
https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/Product

Timeline

Published: May 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-223627.5SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information fr CVE-2023-223637.5A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via assigning cardholders CVE-2023-223657.2An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5. A specially CVE-2023-223667.8CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project CVE-2023-223675.9Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, which CVE-2023-223687.8Untrusted search path vulnerability in ELECOM Camera Assistant 1.00 and QuickFileDealer Ver.1.2.1 and earlier allows an attacker to gain pri CVE-2023-22378.8The WP Replicate Post plugin for WordPress is vulnerable to SQL Injection via the post_id parameter in versions up to, and including, 4.0.2 CVE-2023-223705.2Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent aut CVE-2023-223718.1An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafte CVE-2023-223725.9In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS.CVE-2023-223735.4Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to inject an a CVE-2023-223748.5A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, poten