CVE-2023-25070 Information disclosure in SkyBridge MB-A100/110
Remote attackers can eavesdrop on or alter administrator communications if telnet is enabled on SkyBridge MB-A100/110 devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-25070?
CVE-2023-25070 is a medium-severity vulnerability in Seiko Solutions Inc. SkyBridge MB-A100/110, published on 10 May 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator's communication to the product.
Weakness: CWE-319
Which versions are affected by CVE-2023-25070?
It affects 2 products.
Products include Seiko-Sol Skybridge Mb-A100 Firmware, Seiko-Sol Skybridge Mb-A110 Firmware.
How do I fix CVE-2023-25070?
No fix has been published for CVE-2023-25070 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-25070 being exploited?
There is no known exploitation of CVE-2023-25070 in the wild and no public exploit code.
Other vulnerabilities in Seiko Solutions Inc. SkyBridge MB-A100/110
Sources
Also known as GHSA-ww2f-6g2m-fwjx.