CVE-2018-20008

iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface,...

6.8 Medium

CVE-2018-20008 is a medium vulnerability (CVSS 6.8) in Iball Ib-wrb302n Firmware, published May 28, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. No source names a fixed version.

iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials (plain text) and the web-console password (base64) via the debugging console.

Attack profile

How easy it is to exploit

Attack vector: Physical
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.29%Down 0.6 points since Jul 1, 2022

What each source reports

NVD Score used 6.8

Record: CVE-2018-20008
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-312, CWE-732
Updated: 2026-11-02

CVE List No score

Record: CVE-2018-20008
Updated: 2026-11-02

EUVDEUVD-2018-12586 No score

Record: EUVD-2018-12586
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rm4j-g65f-jfgx No score

iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface,...

Record: GHSA-rm4j-g65f-jfgx
Weakness: CWE-312
Updated: 2026-11-02

Affected products

iball ib-wrb302n firmware

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD