What’s Vulnerable › Vulnerabilities

CVE-2022-36560

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-29 · updated 2026-06-17
• Weakness: CWE-798

Description

Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded passcodes for root. Attackers are able to access the passcodes at /etc/srapi/config/system.conf and /usr/sbin/ssol-sshd.sh.

Affected products

• Seiko Solutions Inc. SkyBridge MB-A200: through 01.00.04

References

• https://gist.github.com/Nwqda/0db1fc6cfa39d7f0592d44e18c40146e
• https://www.seiko-sol.co.jp/products/skybridge/lineup/mb-a200/
• https://gist.github.com/Nwqda/0db1fc6cfa39d7f0592d44e18c40146e
• https://www.seiko-sol.co.jp/products/skybridge/lineup/mb-a200/

Get alerted when CVE-2022-36560 or the next vulnerability affects your stack