CVE-2017-18371: Command Injection
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this ZyXEL router vulnerability?
The vulnerability ID for this ZyXEL router vulnerability is CVE-2017-18371.
What is the severity of CVE-2017-18371?
CVE-2017-18371 has a severity rating of 9.8 (critical).
What is the affected software for CVE-2017-18371?
The affected software for CVE-2017-18371 includes ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 routers distributed by TrueOnline.
Are there any default passwords associated with CVE-2017-18371?
Yes, the ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router has three user accounts with default passwords: true/true and supervisor/zyad1234.
Where can I find more information about CVE-2017-18371?
More information about CVE-2017-18371 can be found at the following references: [ZyXEL Support](http://www.zyxel.com/support/announcement_unauthenticated.shtml), [GitHub - PoC](https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt), [Full Disclosure Mailing List](https://seclists.org/fulldisclosure/2017/Jan/40).