CVE-2018-6387

Name of the Vulnerable Software and Affected Versions iBall iB-WRA150N version 1.2.6 build 110401 Rel.47776n

Description The issue is related to the use of predefined credentials in the device's firmware. An attacker can exploit this to gain administrative access to the device remotely. The device has hardcoded passwords for its accounts, including admin for the admin account, support for the support account, and user for the user account.

Recommendations For iBall iB-WRA150N version 1.2.6 build 110401 Rel.47776n, consider changing the hardcoded passwords for the admin, support, and user accounts to unique and strong passwords to prevent unauthorized access. As a temporary workaround, restrict remote access to the device until the issue is resolved.