Description
iBall ADSL2 + Home路由器在通过cgi版本访问页面时没有正确认证。 这可能允许远程攻击者访问敏感信息并执行诸如重置路由器，下载备份配置，上传备份等操作。
iBall ADSL2 + Home 路由器 CGI 版本存在鉴权绕过
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.exploit-db.com/exploits/42740
https://www.cvedetails.com/cve/CVE-2017-14244/
https://nvd.nist.gov/vuln/detail/cve-2017-14244
https://seclists.org/fulldisclosure/2017/Mar/27
https://007software.net/iball-150m-wireless-n-adsl2-router-authentication-bypass/
https://cxsecurity.com/issue/WLB-2015060152
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:IBALL-ADSL-AUTH-BYPASS.html