9.8crit
CVE-2017-6558in critical feed1 exploit
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allo…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
15.3%
percentile 97%
Public exploits
1
Exploit-DB
Summary
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.
Exploit prediction (EPSS)
15.27% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.
Exploits and detections
- EDB-42591 iBall Baton 150M Wireless Router - Authentication Bypass · webapps · 2017-03-07
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Weakness
- CWE-798 Use of Hard-coded Credentials
References
- youtube.com /watch?v=8GZg1IuSfCs · x_refsource_MISC, x_transferred
- securityfocus.com /bid/96822 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-6558
- NVD: CVE-2017-6558
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.