Weak Credential Vulnerabilities in Seiko's SkyBridge MB-A100/110 Firmware

CVE-2023-25072

What is CVE-2023-25072?

The SkyBridge MB-A100 and MB-A110 firmware versions 4.2.0 and earlier contain vulnerabilities due to the use of weak credentials, which may be exploited by remote attackers without authentication. This weakness allows the attacker to decrypt passwords for the WebUI, potentially compromising the product's security and granting unauthorized access to sensitive functions. This highlights the importance of implementing stronger password policies and regular firmware updates to mitigate such risks.

References