Skip to content
OpenAdvisories
Medium · 4.8 CVE-2023-23901 EUVD-2023-27984GHSA-m4jm-xmcc-hjcm

Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB…

Published May 10, 2023 · Updated Jan 28, 2025 · Assigned by jpcert

Vendor: Seiko Solutions Product: SkyBridge MB-A200 and SkyBridge BASIC MB-A130

Description

Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, which may allow a remote unauthenticated attacker to eavesdrop on or alter the communication sent to the WebUI of the product.

Affected products

VendorProductAffectedFixed
Seiko Solutions SkyBridge MB-A200 and SkyBridge BASIC MB-A130 SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier —

References