PT-2019-8306 · Zyxel · Zyxel P660Hn-T1A

Pedro Ribeiro · Publicado 2019-05-02 · Atualizado 2019-05-03 · CVE-2017-18371

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZyXEL P660HN-T1A v2 TCLinux Fw version 7.3.37.6

Description The issue concerns default passwords for user accounts in the router, including two hardcoded service accounts. One account has the username true and password true, and another has the username supervisor and password zyad1234. These accounts can be used to login to the web interface, potentially allowing for authenticated command injections and changes to router settings for malicious purposes.

Recommendations For ZyXEL P660HN-T1A v2 TCLinux Fw version 7.3.37.6, change the default passwords of the true and supervisor accounts to secure passwords to prevent unauthorized access. Consider disabling these accounts if they are not necessary for the router's operation.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2017-18371

Produtos afetados

Zyxel P660Hn-T1A

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/trueonline_p660hn_v2_rce.rb · Exploit
• 🔥 https://seclists.org/fulldisclosure/2017/Jan/40 · Exploit
• 🔥 https://ssd-disclosure.com/index.php/archives/2910 · Exploit
• 🔥 https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-18371 · Nota de Segurança
• http://zyxel.com/support/announcement_unauthenticated.shtml · Nota
• https://osv.dev/vulnerability/CVE-2017-18371 · Aviso do Fabricante
• https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems · Nota