Lucene search

[email protected]CVE-2020-15043

HistoryJun 29, 2020 - 6:15 p.m.

CVE-2020-15043

2020-06-2918:15:12

CWE-352

[email protected]

web.nvd.nist.gov

iball

wrb303n

csrf

vulnerability

remote management

dhcp

subnet

ip addresses

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.0%

JSON

iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses.

Affected configurations

NVD

Node

iballwrb303n_firmwareMatch-

AND

iballwrb303nMatch-

CPENameOperatorVersion
iball:wrb303n_firmwareiball wrb303n firmwareeq-

CPE	Name	Operator	Version
iball:wrb303n_firmware	iball wrb303n firmware	eq	-

References

gist.github.com/Saket-taneja/4dda4b2df5aa0973a7160bb6bf8875e0

github.com/Saket-taneja/IballCSRFExploit

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.0%

JSON

Related for CVE-2020-15043

prion1 cvelist1 nvd1