This vulnerability involves improper neutralization of special elements used in OS commands within the SkyBridge MB-A100/MB-A110 products by Seiko Solutions Inc. An attacker who can authenticate with administrative privileges may exploit this flaw to execute arbitrary OS commands on the affected device. The CVSS v3.0 base score is 7.2, reflecting network attack vector, low attack complexity, high confidentiality, integrity, and availability impacts. No patch or official remediation information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows an attacker with administrative access to execute arbitrary OS commands, potentially leading to full compromise of the affected device, including unauthorized data access, modification, and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrative access to trusted users only and monitor for suspicious activity. Avoid exposing the device management interfaces to untrusted networks.