CVE-2017-18368

🗓️ 02 May 2019 16:14:16Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 477 Views🌐 WEB

The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router by TrueOnline is vulnerable to command injection via unauthenticated access

Reporter	Title	Published	Views	Family All 18
ATTACKERKB	CVE-2017-18368	2 May 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of the microprogrammed software of ZyXEL P660HN-T1A and Billion 5200W-T lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary code.	13 Dec 202400:00	–	bdu_fstec
Circl	CVE-2017-18368	29 May 201815:50	–	circl
CISA KEV Catalog	Zyxel P660HN-T1A Routers Command Injection Vulnerability	7 Aug 202300:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	7 Aug 202312:00	–	cisa
Cvelist	CVE-2017-18368	2 May 201916:14	–	cvelist
hivepro	Gafgyt Botnet Exploiting Five Years Old Critical Vulnerability in Zyxel Routers	11 Aug 202311:46	–	hivepro
Metasploit	TrueOnline / ZyXEL P660HN-T v1 Router Unauthenticated Command Injection	12 Jan 201717:49	–	metasploit
NVD	CVE-2017-18368	2 May 201917:29	–	nvd
OSV	CVE-2017-18368	2 May 201917:29	–	osv

NVD

Node

AND

Node

AND

Node

AND

Source	Link
ssd-disclosure	www.ssd-disclosure.com/index.php/archives/2910
unit42	www.unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/
zyxel	www.zyxel.com/support/announcement_unauthenticated.shtml
seclists	www.seclists.org/fulldisclosure/2017/Jan/40
raw	www.raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
remote_submit_Flag	request body	cgi-bin/ViewLog.asp	Unauthenticated command injection in the remote log forwarding page via the remote_host parameter.	CWE-78
remote_syslog_Flag	request body	cgi-bin/ViewLog.asp	Unauthenticated command injection in the remote log forwarding page via the remote_host parameter.	CWE-78
RemoteSyslogSupported	request body	cgi-bin/ViewLog.asp	Unauthenticated command injection in the remote log forwarding page via the remote_host parameter.	CWE-78
remote_host	request body	cgi-bin/ViewLog.asp	Unauthenticated command injection in the remote log forwarding page via the remote_host parameter.	CWE-78
remoteSubmit	request body	cgi-bin/ViewLog.asp	Unauthenticated command injection in the remote log forwarding page via the remote_host parameter.	CWE-78

17 Jun 2026 01:12Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

CVSS 210

EPSS0.94508

SSVC