CVE-2017-14244
CriticalSummary
An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directly access administrative router settings by crafting URLs with a .cgi extension, as demonstrated by /info.cgi and /password.cgi.
Risk Assessment
This vulnerability allows attackers to modify router settings, potentially leading to control over the home network and compromising user data.
Recommendation
It is recommended to update the router firmware to the latest version and implement additional security measures, such as changing default passwords and restricting access to the administrative panel.
Original NVD description (English source)
An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directly access administrative router settings by crafting URLs with a .cgi extension, as demonstrated by /info.cgi and /password.cgi.