Vulnerabilities > Iball > IB Wra150N

DATE CVE VULNERABILITY TITLE RISK
2018-01-29 CVE-2018-6388 OS Command Injection vulnerability in Iball Ib-Wra150N Firmware 1.2.6
iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices allow remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping test arguments on the Diagnostics page.
network
low complexity
iball CWE-78
critical
9.0
2018-01-29 CVE-2018-6387 Use of Hard-coded Credentials vulnerability in Iball Ib-Wra150N Firmware 1.2.6
iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices have a hardcoded password of admin for the admin account, a hardcoded password of support for the support account, and a hardcoded password of user for the user account.
network
low complexity
iball CWE-798
critical
10.0