CVE-2022-36558: Seiko-Sol Skybridge Mb-a100 Firmware

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account. Attackers are able to access the passcord via the file /etc/ciel.cfg.

Affected products

  • Seiko-Sol Skybridge Mb-a100 Firmware: up to and including 4.2.0
  • Seiko-Sol Skybridge Mb-a110 Firmware: up to and including 4.2.0

Published 2022-08-29. Last modified 2026-06-17.