{"id":"CVE-2017-6558","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-6558","generatedAt":"2026-10-29T00:33:31.322Z","title":"iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the…","description":"iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.","published":"2017-03-09T09:59:00.000Z","lastModified":"2026-06-17T01:22:34.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-798"],"affected":["iball/ib-wra150n firmware"],"epss":{"score":0.15265,"percentile":0.96748,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.09771,"percentile":0.9538},{"date":"2026-09-22","score":0.15265,"percentile":0.96609}]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2017-03-07","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":42591,"kind":"exploit","title":"iBall Baton 150M Wireless Router - Authentication Bypass","url":"https://www.exploit-db.com/exploits/42591","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/42591.txt","file":"exploits/php/webapps/42591.txt","published":"2017-03-07","added":"2017-08-30","updated":"2017-09-14","author":"Indrajith.A.N","type":"webapps","platform":"php","port":null,"verified":false,"codes":["CVE-2017-6558"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 15.3%, higher than 97% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-09-22T00:00:00.000Z","detail":{"to":0.15265,"from":0.09771,"percentile":0.96609},"summary":"EPSS moved from 9.8% to 15.3% probability of exploitation in the next thirty days."}],"references":[{"url":"http://www.securityfocus.com/bid/96822","source":"cve@mitre.org"},{"url":"https://www.youtube.com/watch?v=8GZg1IuSfCs","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/96822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.youtube.com/watch?v=8GZg1IuSfCs","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-6558","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}