CVE-2018-6388

CVE-2018-6388 describes a critical vulnerability in iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices, allowing remote authenticated users to execute arbitrary OS commands. This is achieved by injecting shell metacharacters into the ping test arguments on the Diagnostics page. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low attack complexity and requires only low privileges, leading to high impacts on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB (EDB-44043), though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.