Vulnerabilities

TI-2018-14187 CVE-2018-20008 · GHSA-rm4j-g65f-jfgx

iBall Baton iB-WRB302N20122017 devices have improper access control over the UART…

LOW 30

iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials (plain text) and the web-console password (base64) via the debugging…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00291 Published 2019-05-28 No fix listed CWE-312

TI-2018-04677 CVE-2018-6355 · GHSA-3f4x-m2xv-8983

/goform/setLang on iBall 300M devices with "iB-WRB302N_1.0.1-Sep 8 2017" firmware has…

LOW 28

/goform/setLang on iBall 300M devices with "iB-WRB302N_1.0.1-Sep 8 2017" firmware has Unauthenticated Stored Cross Site Scripting via the lang parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00647 Published 2018-01-30 No fix listed CWE-79

Vulnerabilities

Filters

iBall Baton iB-WRB302N20122017 devices have improper access control over the UART…

/goform/setLang on iBall 300M devices with "iB-WRB302N_1.0.1-Sep 8 2017" firmware has…