Vulnerabilities > CVE-2017-11169 - Unspecified vulnerability in Iball Ib-Wra300N3Gt Firmware 1.1.1

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
iball

Summary

Privilege Escalation on iBall iB-WRA300N3GT iB-WRA300N3GT_1.1.1 devices allows remote authenticated users to obtain root privileges by leveraging a guest/user/normal account to submit a modified privilege parameter to /form2userconfig.cgi.

Vulnerable Configurations

Part Description Count
OS
Iball
1
Hardware
Iball
1