CVE-2022-36559 is a critical command injection vulnerability affecting Seiko SkyBridge MB-A200 devices running firmware v01.00.04 and below, specifically through the Ping parameter in ping_exec.cgi. With a CVSS score of 9.8, this vulnerability allows unauthenticated attackers to execute arbitrary commands remotely with high impact on confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there is minimal community discussion or media coverage, its critical nature warrants immediate attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 01.00.04CPE matchmatch criteria | cpe:2.3:o:seiko-sol:skybridge_mb-a200_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.