CVE-2017-6558

Critical

Description

iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.

SeverityCritical
CVSS9.8
Exploit probability—
ProductIball Ib-wra150n Firmware
PublishedMar 9, 2017
First seenMar 9, 2017

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
iball ib-wra150n_firmware1.2.6—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2017-6558 · Iball Ib-wra150n Firmware · Dark Radar