CVE-2023-23901

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, which may allow a remote unauthenticated attacker to eavesdrop on or alter the communication sent to the WebUI of the product.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-295

Affected software

Vendor	Product	Versions
Seiko Solutions Inc.	SkyBridge MB-A200 and SkyBridge BASIC MB-A130	SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier

References

https://jvn.jp/en/jp/JVN40604023/Third Party Advisory
https://www.seiko-sol.co.jp/archives/73969/Vendor Advisory
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/Product
https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/Product
https://jvn.jp/en/jp/JVN40604023/Third Party Advisory
https://www.seiko-sol.co.jp/archives/73969/Vendor Advisory
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/Product
https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/Product
https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/Product

Timeline

Published: May 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-239029.8A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially crafted network request c CVE-2023-239034.9An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct fil CVE-2023-239046.1NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of p CVE-2023-239067.5Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unaut CVE-2023-239077.5A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request CVE-2023-239084.4Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable inform CVE-2023-239095.5Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authentic CVE-2023-23914.8A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the CVE-2023-239107.8Out-of-bounds write for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenti CVE-2023-239117.5An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a use CVE-2023-239128.8A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with t CVE-2023-239136.3There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are as