CVE-2017-6558
CriticalSummary
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.
Risk Assessment
This vulnerability may lead to unauthorized access to router settings, posing a risk of device takeover and potential network security breaches.
Recommendation
It is recommended to update the device firmware to the latest version and secure access to configuration files to minimize the risk of exploitation of this vulnerability.
Original NVD description (English source)
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.