CVE-2017-6558

This is a writeup describing an authentication bypass vulnerability in the iball Baton 150M Wireless router. The exploit involves accessing the password.cgi file to disclose admin credentials in the page source.

This repository contains a Python script that checks for authentication bypass and information disclosure vulnerabilities in iBall and UTStar routers. It identifies specific models and firmware versions affected by CVE-2017-6558, CVE-2017-14243, and CVE-2017-14244.