3 matches found
Command injection
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the toolstime.asp page and can be exploited through the...
CVE-2017-18372
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the toolstime.asp page and can be exploited through the...
ZyXEL Billion 5200W-T Router Remote Command Execution Vulnerability
The ZyXEL Billion 5200W-T is a router manufactured by Hutchinson Technology. A remote command execution vulnerability exists in the ZyXEL Billion 5200W-T router. The toolstime.asp interface uiViewSNTPServer parameter allows an attacker to remotely execute arbitrary code due to command injection a...