CVE-2020-15043

iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
VendorProductVersion
iballwrb303n_firmware
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://gist.github.com/Saket-taneja/4dda4b2df5aa0973a7160bb6bf8875e0
https://github.com/Saket-taneja/IballCSRFExploit
https://gist.github.com/Saket-taneja/4dda4b2df5aa0973a7160bb6bf8875e0
https://github.com/Saket-taneja/IballCSRFExploit