PT-2019-8309 · Zyxel · Zyxel P660Hn-T1A

Pedro Ribeiro · Publicado 2019-05-02 · Atualizado 2019-05-03 · CVE-2017-18374

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZyXEL P660HN-T1A version $7.3.15.0 v001 / 3.40(ULM.0)b31

Description The issue concerns default passwords for two user accounts in the router, including a hardcoded service account with the username true and password true. These default credentials can be exploited to log in to the web interface, execute authenticated command injections, and modify router settings for malicious purposes.

Recommendations For ZyXEL P660HN-T1A version $7.3.15.0 v001 / 3.40(ULM.0)b31, change the default passwords of the user accounts, especially the hardcoded service account with the username true and password true, to prevent unauthorized access and potential exploitation.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2017-18374

Produtos afetados

Zyxel P660Hn-T1A

Referências · 7

• 🔥 https://ssd-disclosure.com/index.php/archives/2910 · Exploit
• 🔥 https://seclists.org/fulldisclosure/2017/Jan/40 · Exploit
• 🔥 https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt · Exploit
• https://osv.dev/vulnerability/CVE-2017-18374 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-18374 · Nota de Segurança
• http://zyxel.com/support/announcement_unauthenticated.shtml · Nota
• https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems · Nota