CVE-2018-18754: Critical severity zyxel vmg3312-b10b vulnerability
Published Oct 28, 2018
·Updated
ZyXEL VMG3312-B10B 1.00(AAPP.7) devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/default.cfg file.
Affected Software
2 affected components
ZyXEL Vmg3312-b10b Firmware=1.00\(aapp.7\)
ZyXEL VMG3312-B10B
Event History
Oct 28, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-18754?
CVE-2018-18754 is considered a high severity vulnerability due to the presence of a backdoor root account.
2
How do I fix CVE-2018-18754?
To fix CVE-2018-18754, update the ZyXEL VMG3312-B10B device to a firmware version that does not contain the backdoor.
3
What devices are affected by CVE-2018-18754?
CVE-2018-18754 affects ZyXEL VMG3312-B10B devices running firmware version 1.00(AAPP.7).
4
Is there a known exploit for CVE-2018-18754?
Yes, CVE-2018-18754 is exploited via the backdoor root account that is accessible due to the hardcoded password hash.
5
What risks does CVE-2018-18754 pose to users?
CVE-2018-18754 poses significant risks including unauthorized remote access to the device, potential data breaches, and network compromise.