CVEvulnerability
CVE-2017-6558
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-03-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-798
Description
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.
Affected configurations
• iball ib-wra150n firmware 1.2.6
Related
Weakness · CWE (1)
- CWE-798 Use of Hard-coded Credentials weakness
References
- http://www.securityfocus.com/bid/96822 www.securityfocus.com
- https://www.youtube.com/watch?v=8GZg1IuSfCs www.youtube.com
- http://www.securityfocus.com/bid/96822 www.securityfocus.com
- https://www.youtube.com/watch?v=8GZg1IuSfCs www.youtube.com