The vulnerability of the microprogrammed software of ZyXEL P660HN-T1A and Billion 5200W-T lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary code.

🗓️ 13 Dec 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Remote code execution flaw in ZyXEL P660HN-T1A and Billion 5200W-T microprogrammed software due to lack of neutralizing special elements.

Reporter	Title	Published	Views	Family All 18
ATTACKERKB	CVE-2017-18368	2 May 201900:00	–	attackerkb
Circl	CVE-2017-18368	29 May 201815:50	–	circl
CISA KEV Catalog	Zyxel P660HN-T1A Routers Command Injection Vulnerability	7 Aug 202300:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	7 Aug 202312:00	–	cisa
CVE	CVE-2017-18368	2 May 201916:14	–	cve
Cvelist	CVE-2017-18368	2 May 201916:14	–	cvelist
hivepro	Gafgyt Botnet Exploiting Five Years Old Critical Vulnerability in Zyxel Routers	11 Aug 202311:46	–	hivepro
Metasploit	TrueOnline / ZyXEL P660HN-T v1 Router Unauthenticated Command Injection	12 Jan 201717:49	–	metasploit
NVD	CVE-2017-18368	2 May 201917:29	–	nvd
OSV	CVE-2017-18368	2 May 201917:29	–	osv

Vulners

Node

zyxel_communications p660hn-t1aMatch7.3.15.0

OR

billion_electric_co.,billion_5200w-tMatch7.3.8.0

Source	Link
ssd-disclosure	www.ssd-disclosure.com/ssd-advisory-zyxel-multiple-vulnerabilities/
k0st	www.k0st.wordpress.com/2015/07/05/identifying-and-exploiting-rom-0-vulnerabilities/
seclists	www.seclists.org/fulldisclosure/2017/Jan/40
raw	www.raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt
vuldb	www.vuldb.com/
trendmicro	www.trendmicro.com/en_us/research/25/j/rondodox.html
web	www.web.nvd.nist.gov/view/vuln/detail

14 Oct 2025 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 39.8

CVSS 210

EPSS0.94508

zyxel p660hn t1a billion 5200w microprogrammed software remote code execution