PT-2017-17156
CVE-2017-6558
·
تاريخ النشر
2017-03-09
·
تاريخ التحديث
2021-06-17
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
iball Baton 150M iB-WRA150N version 1.2.6
Description
The issue allows remote attackers to bypass authentication and view or modify administrative router settings. This is achieved by reading the HTML source code of the
password.cgi file.Recommendations
For version 1.2.6, consider restricting access to the
password.cgi file as a temporary workaround until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾