CVE-2022-36560

CRITICAL EXPLOITED

Seiko SkyBridge MB-A200 <v01.00.04 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2022-36560 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded passcodes for root. Attackers are able to access the passcodes at /etc/srapi/config/system.conf and /usr/sbin/ssol-sshd.sh.

References (2)

Core 2
Core References
Product, Vendor Advisory x_refsource_misc
https://www.seiko-sol.co.jp/products/skybridge/lineup/mb-a200/

Scores

CVSS v3 9.8
EPSS 0.0067
EPSS Percentile 47.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2024-01-05
CWE
CWE-798
Status published
Products (1)
seiko-sol/skybridge_mb-a200_firmware < 01.00.04
Published Aug 29, 2022
Tracked Since Feb 18, 2026