NetSight
critical9.8

CVE-2022-36558

Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account.

Impact

Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account. Attackers are able to access the passcord via the file /etc/ciel.cfg.

Affected products

VendorProductAffected versions
Seiko-SolSkybridge Mb-A100 Firmware
through 4.2.0
Seiko-SolSkybridge Mb-A110 Firmware
through 4.2.0

Weakness classification

References