CVE-2022-36556

moderate-risk
Published 2022-08-29

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08execute_ping_01.

Do I need to act?

~
2.2% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (2)

Skybridge Mb-A100 Firmware
Skybridge Mb-A110 Firmware

Affected Vendors

Seiko-Sol

References (4)

Broken Link https://gist.github.com/Nwqda/88232102fed50b54c43871e88e993b54
Product https://www.seiko-sol.co.jp/products/skybridge/lineup/mb-a100/
Broken Link https://gist.github.com/Nwqda/88232102fed50b54c43871e88e993b54
Product https://www.seiko-sol.co.jp/products/skybridge/lineup/mb-a100/
44
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 5/34 · Minimal
Exposure 7/34 · Low