CVE-2022-36558: Seiko-Sol Skybridge Mb-a100 Firmware
Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.
Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account. Attackers are able to access the passcord via the file /etc/ciel.cfg.
Affected products
- Seiko-Sol Skybridge Mb-a100 Firmware: up to and including 4.2.0
- Seiko-Sol Skybridge Mb-a110 Firmware: up to and including 4.2.0
Published 2022-08-29. Last modified 2026-06-17.