SkyBridge, SkySpider routers hit by active exploits
Seiko Solutions' SkyBridge IoT routers and SkySpider Wi-Fi access points have vulnerabilities already being exploited in the wild, IPA warns.
Sourceipa.go.jp — open the original
What to check
- Applies to
- Whether this concerns you is not assessed; the names the report mentions are listed below.
Japan's IPA issued an alert on vulnerabilities affecting Seiko Solutions' SkyBridge LTE IoT routers and SkySpider PoE Wi-Fi access points. An attacker with access to the web configuration interface could exploit these flaws to attack or destroy the device, steal or tamper with data, and execute arbitrary built-in commands.
IPA states that exploitation of these vulnerabilities has already been confirmed in the wild, and urges affected organizations to update firmware to the latest versions provided by the vendor as soon as possible. Notably, the vendor has indicated that patching alone does not fully resolve some of the vulnerabilities, and recommends additional mitigations be applied per vendor guidance.
No specific CVE identifiers, threat actor attribution, or technical indicators were provided in this alert. Organizations using these devices should consult Seiko Solutions' official advisories for detailed remediation and workaround instructions.
Source reporting: https://www.ipa.go.jp/archive/security/security-alert/2023/alert20230830.html
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,445 reports from 149 sources, 666 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs