critical9.8
CVE-2022-36558
Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account.
Impact
Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account. Attackers are able to access the passcord via the file /etc/ciel.cfg.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seiko-Sol | Skybridge Mb-A100 Firmware | through 4.2.0 |
| Seiko-Sol | Skybridge Mb-A110 Firmware | through 4.2.0 |