CVE-2017-6558 PoC — iball Baton 150M Wireless-N ADSI.2+路由器安全漏洞

Source

https://github.com/GemGeorge/iBall-UTStar-CVEChecker

Associated Vulnerability

Title:iball Baton 150M Wireless-N ADSI.2+路由器安全漏洞 (CVE-2017-6558)
Description:iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.

Description

POC checks for CVE-2017-6558, CVE-2017-14243 & CVE-2017-14244

Readme

# iBall & UTStar Authentication Bypass & Information Disclosure Vulnerabilities
POC checks for CVE-2017-6558, CVE-2017-14243 &amp; CVE-2017-14244

# Screenshots
![POC 1](sc1.png)
![POC 2](sc2.png)

# References
1. https://www.techipick.com/iball-baton-adsl2-home-router-utstar-wa3002g4-adsl-broadband-modem-authentication-bypass
2. https://www.exploit-db.com/exploits/42739/
3. https://www.exploit-db.com/exploits/42740/
4. https://www.youtube.com/watch?v=8GZg1IuSfCs

File Snapshot


 [4.0K]  /data/pocs/63511332795a3e74224f571c5aa983aab6201787
├── [2.6K]  iball-utstar.py
├── [ 468]  README.md
├── [ 19K]  sc1.png
└── [ 15K]  sc2.png

0 directories, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!