Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2839▼ 348 respecto a la semana anterior
Críticas / altas1378▼ 43 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 0.83% | — | Seiko-sol Skybridge Mb-a110 FirmwareSeiko-sol Skybridge Mb-a100 Firmware | 10/5/2023 | 17/6/2026 | Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product. | |
| Modificada | Media (6.5) | 0.51% | — | Seiko-sol Skybridge Mb-a110 FirmwareSeiko-sol Skybridge Mb-a100 Firmware | 10/5/2023 | 17/6/2026 | Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator's communication to the product. | |
| Modificada | Media (6.5) | 0.55% | — | Seiko-sol Skybridge Mb-a110 FirmwareSeiko-sol Skybridge Mb-a100 Firmware | 10/5/2023 | 17/6/2026 | Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote authenticated attacker to obtain an APN credential for the product. | |
| Modificada | Alta (7.5) | 1.3% | — | Seiko-sol Skybridge Mb-a110 FirmwareSeiko-sol Skybridge Mb-a100 Firmware | 10/5/2023 | 17/6/2026 | Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to execute some critical functions without authentication, e.g., rebooting the product. | |
| Modificada | Media (6.5) | 36% | — | Seiko-sol Skybridge Mb-a110 FirmwareSeiko-sol Skybridge Mb-a100 Firmware | 10/5/2023 | 17/6/2026 | Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker to alter a WebUI password of the product. | |
| Modificada | Crítica (9.8) | 0.79% | — | Seiko-sol Skybridge Mb-a100 FirmwareSeiko-sol Skybridge Mb-a110 Firmware | 29/8/2022 | 17/6/2026 | Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account. Attackers are able to access the passcord via the file /etc/ciel.cfg. | |
| Modificada | Crítica (9.8) | 1.1% | — | Seiko-sol Skybridge Mb-a100 FirmwareSeiko-sol Skybridge Mb-a110 Firmware | 29/8/2022 | 17/6/2026 | Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file. | |
| Modificada | Crítica (9.8) | 1.6% | — | Seiko-sol Skybridge Mb-a100 FirmwareSeiko-sol Skybridge Mb-a110 Firmware | 29/8/2022 | 17/6/2026 | Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08execute_ping_01. |