Seiko Solutions Inc.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| SkyBridge MB-A100/110 | 5 | – | May 10, 2023 |
| SkyBridge BASIC MB-A130 | 2 | – | Sep 1, 2025 |
| SkyBridge MB-A100/MB-A110 | 2 | – | Jul 1, 2026 |
| SkyBridge MB-A200 and SkyBridge BASIC MB-A130 | 2 | – | May 10, 2023 |
| SkyBridge MB-A200 | 1 | – | May 10, 2023 |
| SkyBridge MB-A200, SkyBridge BASIC MB-A130, and SkySpider MB-R210 | 1 | – | May 10, 2023 |
Exploited and recent CVEs
- CVE-2026-50043 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge MB-A100/MB-A110. If this vulnerability is exploited, an arbitrary OS command may be 1.7%
- CVE-2025-54857 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacke 2.6%
- CVE-2024-32850 Improper neutralization of special elements used in a command ('Command Injection') exists in SkyBridge MB-A100/MB-A110 firmware Ver. 4.2.2 and earlier and SkyBridge BASIC MB-A130 firmware Ver. 1.5.5 1.2%
- CVE-2024-32850 Improper neutralization of special elements used in a command ('Command Injection') exists in SkyBridge MB-A100/MB-A110 firmware Ver. 4.2.2 and earlier and SkyBridge BASIC MB-A130 firmware Ver. 1.5.5 1.2%
- CVE-2023-25072 Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product. 0.8%
- CVE-2023-23906 Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to execute some critical functions witho 1.3%
- CVE-2023-23578 Improper access control vulnerability in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier allows a remote unauthenticated attacker to connect to the product's ADB port. 2.0%
- CVE-2023-22441 Missing authentication for critical function exists in Seiko Solutions SkyBridge series, which may allow a remote attacker to obtain or alter the setting information of the product or execute some cri 1.0%
- CVE-2023-23901 Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, which may allow a remo 0.5%
- CVE-2023-25184 Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product. Affected products 1.0%
- CVE-2023-24586 Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote authenticated attacker to obtain an APN credential for the product. 0.5%
- CVE-2023-22361 Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker to alter a WebUI password of the product. 35.9%
- CVE-2023-25070 Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on 0.5%