CVE-2017-18370: OS Command Injection
First published: Thu May 02 2019(Updated: )
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. The vulnerability is in the logSet.asp page and can be exploited through the ServerIP parameter. Authentication can be achieved by exploiting CVE-2017-18371.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zyxel P660HN-T1A Routers | =7.3.8.0 | |
| Billion 5200W-T | ||
| Zyxel P660HN-T1A Routers | =7.3.37.6 | |
| Zyxel P660HN-T1A Routers | ||
| Zyxel P660hn-t1a V1 Firmware | =7.3.37.6 | |
| ZyXEL P660HN-T1A v1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.zyxel.com/support/announcement_unauthenticated.shtml
- https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt
- https://seclists.org/fulldisclosure/2017/Jan/40
- https://ssd-disclosure.com/index.php/archives/2910
- https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/
Frequently Asked Questions
What is CVE-2017-18370?
CVE-2017-18370 is a command injection vulnerability in the ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline.
How severe is CVE-2017-18370?
CVE-2017-18370 has a severity rating of 8.8, which is considered critical.
Which software versions are affected by CVE-2017-18370?
The Zyxel P660HN-T1A Routers with firmware versions 7.3.8.0 and 7.3.37.6 are affected by CVE-2017-18370.
How can the command injection vulnerability in CVE-2017-18370 be exploited?
The command injection vulnerability in CVE-2017-18370 can be exploited through the logSet.asp page in the Remote System Log forwarding function, which is only accessible by an authenticated user.
Are other routers or firmware versions vulnerable to CVE-2017-18370?
No, the Billion 5200W-T and ZyXEL P660HN-T1A v1 routers, as well as other firmware versions, are not vulnerable to CVE-2017-18370.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/billion
- canonical/zyxel p660hn-t1a routers
- version/zyxel p660hn-t1a routers/7.3.8.0
- canonical/billion 5200w-t
- vendor/zyxel
- version/zyxel p660hn-t1a routers/7.3.37.6
- canonical/zyxel p660hn-t1a v1 firmware
- version/zyxel p660hn-t1a v1 firmware/7.3.37.6
- canonical/zyxel p660hn-t1a v1