Iball

    Dashboard / Vendors

    Products: 10
    Vulnerabilities: 9
    Known Exploited: 0
    3
    Critical Level Threats
    2
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2020-29292

    iBall WRD12EN 1.0.0 devices allow cross-site request forgery (CSRF) attacks as demonstrated by enabling DNS settings or modifying the range for IP addresses.

    Last Modified: Nov 21, 2024
    Published: Dec 30, 2021

    CVE-2020-15043

    iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses.

    Last Modified: Nov 21, 2024
    Published: Jun 29, 2020

    CVE-2018-20008

    iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials (plain text) and the web-console password (base64) via the debugging console.

    Last Modified: Nov 21, 2024
    Published: May 28, 2019

    CVE-2018-6355

    /goform/setLang on iBall 300M devices with "iB-WRB302N_1.0.1-Sep 8 2017" firmware has Unauthenticated Stored Cross Site Scripting via the lang parameter.

    Last Modified: Nov 21, 2024
    Published: Jan 30, 2018

    CVE-2018-6388

    iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices allow remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping test arguments on the Diagnostics page.

    Last Modified: Nov 21, 2024
    Published: Jan 29, 2018
    Items Per Page