CVE-2018-20008 iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials (plain text) and the web-console password (base64...
MediumCVSS 6.8
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials (plain text) and the web-console password (base64) via the debugging console.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iball ib-wrb302n firmware | = ib-wrb302n20122017 | No fix listed |
References
- payatu.com exploit third-party-advisory
- www.iball.co.in product vendor-advisory