CVE-2023-22361

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2023-22361 is an improper privilege management vulnerability affecting SkyBridge MB-A100/110 firmware versions 4.2.0 and earlier. The flaw resides in the product's WebUI handling and carries a CVSS 3.1 base score of 6.5, reflecting network attack vector, low complexity, and low-privileged authenticated access that results in high integrity impact without affecting confidentiality or availability.

A remote attacker who already possesses valid credentials can exploit the weakness to modify the WebUI administrative password, thereby gaining elevated control over the device's configuration interface. The attack requires no user interaction and can be performed directly over the network.

Vendor advisories published by Seiko Solutions and coordinated through JVN recommend applying the firmware updates hosted on the company's product download pages for the MB-A100, MB-A130, and MB-A200 series; these updates address the privilege-management issue in the affected SkyBridge models.

EPSS for the CVE rose from a low baseline to a peak of 0.0604 before receding to the current value of 0.0146, indicating a period of increased exploitation interest after disclosure.