Vulnerability · Published Jun 29, 2020 · Assigned by mitre
CVE-2020-15043
Medium 6.5
In plain English
A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)0.4%top 60.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses.
Affected products (as reported)
References
- https://gist.github.com/Saket-taneja/4dda4b2df5aa0973a7160bb6bf8875e0 x_refsource_MISC
- https://github.com/Saket-taneja/IballCSRFExploit x_refsource_MISC