CVE-2023-25070

Vulnerability

In SkyBridge MB-A100/110 firmware version 4.2.0 and earlier, the telnet connection transmits sensitive information in cleartext. This vulnerability allows an attacker to intercept administrator communications if telnet is enabled. The affected models are MB-A100 and MB-A110 [2].

Exploitation

An unauthenticated remote attacker can exploit this vulnerability by eavesdropping on the telnet session to capture sensitive data such as credentials. The attacker does not require any special privileges; they only need network access to the device with telnet enabled. The attack can also be used to alter communications by performing man-in-the-middle attacks [2].

Impact

Successful exploitation leads to disclosure of sensitive information, including administrative credentials, and may allow the attacker to tamper with the device configuration or network traffic. This compromises confidentiality and integrity of the device and its communications [2].

Mitigation

As of the publication date (2023-05-10), no patched firmware version is listed in the available references. Users should disable telnet if not required, or restrict network access to trusted hosts. Contact the vendor Seiko Solutions for updated firmware that addresses this issue [2].