CVE-2023-23578

Vulnerability

The SkyBridge MB-A200 router firmware version 01.00.05 and earlier exposes the Android Debug Bridge (ADB) port to the network without proper access control. This allows a remote unauthenticated attacker to connect to the ADB service [3].

Exploitation

An attacker can connect to the ADB port from any network reachable to the device. No authentication or user interaction is required. Standard ADB tools (e.g., adb connect) can be used to establish a connection.

Impact

Successful exploitation grants the attacker ADB access, which typically provides root-level command execution on the device. This can lead to full compromise of the router, including data exfiltration, configuration changes, and use as a pivot point for further attacks.

Mitigation

The vendor has released firmware updates for the MB-A200 (e.g., version 01.03.01) [3], but the specific fix for this vulnerability is not detailed in the provided references. Users should upgrade to the latest firmware version available from the vendor's download page. If an immediate update is not possible, restrict network access to the ADB port (typically TCP 5555) via firewall rules.