2023-05-10 10:00:27 +02:00
{
"id" : "CVE-2023-23901" ,
"sourceIdentifier" : "vultures@jpcert.or.jp" ,
"published" : "2023-05-10T06:15:11.727" ,
2023-05-10 16:00:27 +02:00
"lastModified" : "2023-05-10T13:06:16.563" ,
"vulnStatus" : "Awaiting Analysis" ,
2023-05-10 10:00:27 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, which may allow a remote unauthenticated attacker to eavesdrop on or alter the communication sent to the WebUI of the product."
}
] ,
"metrics" : { } ,
"references" : [
{
"url" : "https://jvn.jp/en/jp/JVN40604023/" ,
"source" : "vultures@jpcert.or.jp"
} ,
{
"url" : "https://www.seiko-sol.co.jp/archives/73969/" ,
"source" : "vultures@jpcert.or.jp"
} ,
{
"url" : "https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/" ,
"source" : "vultures@jpcert.or.jp"
} ,
{
"url" : "https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/" ,
"source" : "vultures@jpcert.or.jp"
} ,
{
"url" : "https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/" ,
"source" : "vultures@jpcert.or.jp"
} ,
{
"url" : "https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/" ,
"source" : "vultures@jpcert.or.jp"
}
]
}