PT-2019-8308 · Billion · Billion 5200W-T

Pedro Ribeiro · Publicado 2019-05-02 · Atualizado 2019-05-03 · CVE-2017-18373

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Billion 5200W-T TCLinux Fw version $7.3.8.0 v008 130603

Description The issue concerns default passwords for three user accounts, including two hardcoded service accounts. One account has the username true and password true, and another has the username user3 with a long password consisting of a repetition of the string 0123456789. These accounts can be used to login to the web interface, allowing for authenticated command injections and changes to router settings for malicious purposes.

Recommendations For Billion 5200W-T TCLinux Fw version $7.3.8.0 v008 130603, change the default passwords of the true and user3 accounts to secure passwords to prevent unauthorized access. As a temporary workaround, consider restricting access to the web interface until the default passwords are changed.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2017-18373

Produtos afetados

Billion 5200W-T

Referências · 5

• 🔥 https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt · Exploit
• 🔥 https://ssd-disclosure.com/index.php/archives/2910 · Exploit
• 🔥 https://seclists.org/fulldisclosure/2017/Jan/40 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-18373 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-18373 · Aviso do Fabricante