CVE-2023-25072

Vulnerability

SkyBridge MB-A100/110 firmware versions 4.2.0 and earlier employ weak credential storage, allowing a remote unauthenticated attacker to decrypt the WebUI administrator password. The vulnerability resides in the password handling mechanism of the WebUI.

Exploitation

An attacker with network access to the device can exploit the weak credential scheme without authentication. By capturing or accessing the stored password hash, the attacker can decrypt it using publicly known weaknesses.

Impact

Successful exploitation yields the plaintext WebUI password, granting full administrative control over the device. This can lead to unauthorized configuration changes, data exfiltration, and potential pivot to internal networks.

Mitigation

The vendor has addressed this issue in firmware versions after 4.2.0. Users should upgrade to the latest firmware available from the official download page [2]. No workaround is documented.