PT-2020-14141 · Iball · Iball Wrb303N

Published 2020-06-29 · Updated 2020-07-06 · CVE-2020-15043

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions iBall WRB303N devices (affected versions not specified)

Description The issue allows CSRF attacks, which can be demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-15043

Affected Products

Iball Wrb303N

References · 4

• 🔥 https://gist.github.com/Saket-taneja/4dda4b2df5aa0973a7160bb6bf8875e0 · Exploit
• 🔥 https://github.com/Saket-taneja/IballCSRFExploit · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-15043 · Security Note
• https://t.me/cvenotify/4719 · Telegram Post