Seiko SkyBridge MB-A200 v01.00.04 and below: Multiple Hard-Coded Root Passcodes Vulnerability

CVE-2022-36560 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded passcodes for root. Attackers are able to access the passcodes at /etc/srapi/config/system.conf and /usr/sbin/ssol-sshd.sh.

Learn more about our Api Penetration Testing.