CVE-2017-6558

critical · 9.8

iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.

9.8

CVSS

15.3%

EPSS (exploit prob.)

97th

EPSS percentile

2017-03-09

Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-798

Affected products

Vendor	Product	Affected versions
iball	ib-wra150n_firmware	1.2.6
iball	ib-wra150n	all versions

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/96822
https://www.youtube.com/watch?v=8GZg1IuSfCs
http://www.securityfocus.com/bid/96822
https://www.youtube.com/watch?v=8GZg1IuSfCs

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-6558