CVE-2023-22441

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

Missing authentication for critical function exists in Seiko Solutions SkyBridge series, which may allow a remote attacker to obtain or alter the setting information of the product or execute some critical functions without authentication, e.g., rebooting the product. Affected products and versions are as follows: SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Weakness enumeration

CWE-306

Affected software

VendorProductVersions
Seiko Solutions Inc.SkyBridge MB-A200 and SkyBridge BASIC MB-A130SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier

References

Timeline

Published
May 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-224427.1Out of bounds write in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of priviCVE-2023-224435.5Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable denial of service via CVE-2023-224444.4Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit, IntelCVE-2023-224474.4Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a prCVE-2023-224487.2Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of privilege via networkCVE-2023-224496.7Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via lCVE-2023-22456.3A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditorCVE-2023-224507.2In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP CVE-2023-224518.8Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or change passwords, theCVE-2023-224526.5kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of CVE-2023-224535.3Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` andCVE-2023-224546.1Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` and
CVE-2023-22441: High severity, CVSS 8.6 | Vulnix