CVE-2017-6558

iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

15.27% chance of exploitation in the next 30 days, 97th percentile

Published

2017-03-09

Updated

2024-08-05

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/42591

References

• CVE Record
• NVD entry

Related

• CVE-2017-6554
• CVE-2017-6559
• CVE-2017-6553
• CVE-2017-6560
• CVE-2017-6552
• CVE-2017-6561