CVE-2018-6388

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-01-29 · updated 2026-06-17
Weakness: CWE-78

Description

iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices allow remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping test arguments on the Diagnostics page.

Affected products

Iball Ib-Wra150N Firmware: 1.2.6

References

https://blogs.securiteam.com/index.php/archives/3654
https://blogs.securiteam.com/index.php/archives/3654

Get alerted when CVE-2018-6388 or the next vulnerability affects your stack