VulnerabilityModified
CVE-2020-15043
iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses.
MEDIUM 6.5EPSS 0.45%
Does this matter?
Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own.
Description
iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS
- 0.45% probability · 38th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- iball/wrb303n firmware
- Source
- cve@mitre.org
References
- https://gist.github.com/Saket-taneja/4dda4b2df5aa0973a7160bb6bf8875e0Exploit, Third Party Advisory
- https://github.com/Saket-taneja/IballCSRFExploitThird Party Advisory
- https://gist.github.com/Saket-taneja/4dda4b2df5aa0973a7160bb6bf8875e0Exploit, Third Party Advisory
- https://github.com/Saket-taneja/IballCSRFExploitThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.