Vulnerabilities > Iball > High

DATE CVE VULNERABILITY TITLE RISK
2018-01-29 CVE-2018-6388 OS Command Injection vulnerability in Iball Ib-Wra150N Firmware 1.2.6
iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices allow remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping test arguments on the Diagnostics page.
network
low complexity
iball CWE-78
8.8
2017-11-13 CVE-2017-11169 Unspecified vulnerability in Iball Ib-Wra300N3Gt Firmware 1.1.1
Privilege Escalation on iBall iB-WRA300N3GT iB-WRA300N3GT_1.1.1 devices allows remote authenticated users to obtain root privileges by leveraging a guest/user/normal account to submit a modified privilege parameter to /form2userconfig.cgi.
network
low complexity
iball
8.8