iball records
9 published records for vendor iball.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-798 Use of Hard-coded Credentials2
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-425 Direct Request ('Forced Browsing')1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2017-14244Proof of concept | An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directliball · ib-wra150n firmware · CWE-425 | Critical9.8 | — | 17.1% | Sep 17, 2017 |
44Plan | CVE-2017-6558Proof of concept | iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allowiball · ib-wra150n firmware · CWE-798 | Critical9.8 | — | 15.3% | Mar 9, 2017 |
40Plan | CVE-2018-6387No exploit | iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices have a hardcoded password of admin for the admin account, a hardcoded password of supiball · ib-wra150n firmware · CWE-798 | Critical9.8 | — | 1.8% | Jan 29, 2018 |
37Monitor | CVE-2018-6388Proof of concept | iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices allow remote authenticated users to execute arbitrary OS commands via shell metacharaiball · ib-wra150n firmware · CWE-78 | High8.8 | — | 5.9% | Jan 29, 2018 |
36Monitor | CVE-2017-11169No exploit | Privilege Escalation on iBall iB-WRA300N3GT iB-WRA300N3GT_1.1.1 devices allows remote authenticated users to obtain root privileges by leveriball · ib-wra300n3gt firmware | High8.8 | — | 2.2% | Nov 13, 2017 |
27Monitor | CVE-2018-20008No exploit | iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi ciball · ib-wrb302n firmware · CWE-312 | Medium6.8 | — | 0.3% | May 28, 2019 |
26Monitor | CVE-2020-15043No exploit | iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IPiball · wrb303n firmware · CWE-352 | Medium6.5 | — | 0.4% | Jun 29, 2020 |
26Monitor | CVE-2020-29292No exploit | iBall WRD12EN 1.0.0 devices allow cross-site request forgery (CSRF) attacks as demonstrated by enabling DNS settings or modifying the range iball · wrd12en firmware · CWE-352 | Medium6.5 | — | 0.4% | Dec 30, 2021 |
24Monitor | CVE-2018-6355No exploit | /goform/setLang on iBall 300M devices with "iB-WRB302N_1.0.1-Sep 8 2017" firmware has Unauthenticated Stored Cross Site Scripting via the laiball · ib-wrb302n firmware · CWE-79 | Medium6.1 | — | 0.6% | Jan 30, 2018 |
- CVE-2017-1424444Plan
An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directl
CriticalCVSS 9.8Proof of conceptEPSS 17%iball · ib-wra150n firmwareSep 17, 2017
- CVE-2017-655844Plan
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allow
CriticalCVSS 9.8Proof of conceptEPSS 15%iball · ib-wra150n firmwareMar 9, 2017
- CVE-2018-638740Plan
iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices have a hardcoded password of admin for the admin account, a hardcoded password of sup
CriticalCVSS 9.8No exploitEPSS 2%iball · ib-wra150n firmwareJan 29, 2018
- CVE-2018-638837Monitor
iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices allow remote authenticated users to execute arbitrary OS commands via shell metachara
HighCVSS 8.8Proof of conceptEPSS 6%iball · ib-wra150n firmwareJan 29, 2018
- CVE-2017-1116936Monitor
Privilege Escalation on iBall iB-WRA300N3GT iB-WRA300N3GT_1.1.1 devices allows remote authenticated users to obtain root privileges by lever
HighCVSS 8.8No exploitEPSS 2%iball · ib-wra300n3gt firmwareNov 13, 2017
- CVE-2018-2000827Monitor
iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi c
MediumCVSS 6.8No exploitEPSS 0%iball · ib-wrb302n firmwareMay 28, 2019
- CVE-2020-1504326Monitor
iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP
MediumCVSS 6.5No exploitEPSS 0%iball · wrb303n firmwareJun 29, 2020
- CVE-2020-2929226Monitor
iBall WRD12EN 1.0.0 devices allow cross-site request forgery (CSRF) attacks as demonstrated by enabling DNS settings or modifying the range
MediumCVSS 6.5No exploitEPSS 0%iball · wrd12en firmwareDec 30, 2021
- CVE-2018-635524Monitor
/goform/setLang on iBall 300M devices with "iB-WRB302N_1.0.1-Sep 8 2017" firmware has Unauthenticated Stored Cross Site Scripting via the la
MediumCVSS 6.1No exploitEPSS 1%iball · ib-wrb302n firmwareJan 30, 2018