Description
Missing authentication for critical function exists in Seiko Solutions SkyBridge series, which may allow a remote attacker to obtain or alter the setting information of the product or execute some critical functions without authentication, e.g., rebooting the product. Affected products and versions are as follows: SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Seiko Solutions Inc. SkyBridge MB-A200 and SkyBridge BASIC MB-A130
SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlieraffected
References
- https://www.seiko-sol.co.jp/archives/73969/ ↗
- https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/ ↗
- https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/ ↗
- https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/ ↗
- https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/ ↗
- https://jvn.jp/en/jp/JVN40604023/ ↗