PT-2019-8306 · Zyxel · Zyxel P660Hn-T1A

Pedro Ribeiro · Published 2019-05-02 · Updated 2019-05-03 · CVE-2017-18371

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZyXEL P660HN-T1A v2 TCLinux Fw version 7.3.37.6

Description The issue concerns default passwords for user accounts in the router, including two hardcoded service accounts. One account has the username true and password true, and another has the username supervisor and password zyad1234. These accounts can be used to login to the web interface, potentially allowing for authenticated command injections and changes to router settings for malicious purposes.

Recommendations For ZyXEL P660HN-T1A v2 TCLinux Fw version 7.3.37.6, change the default passwords of the true and supervisor accounts to secure passwords to prevent unauthorized access. Consider disabling these accounts if they are not necessary for the router's operation.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2017-18371

Affected Products

Zyxel P660Hn-T1A

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/trueonline_p660hn_v2_rce.rb · Exploit
• 🔥 https://seclists.org/fulldisclosure/2017/Jan/40 · Exploit
• 🔥 https://ssd-disclosure.com/index.php/archives/2910 · Exploit
• 🔥 https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-18371 · Security Note
• https://osv.dev/vulnerability/CVE-2017-18371 · Vendor Advisory
• http://zyxel.com/support/announcement_unauthenticated.shtml · Note
• https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems · Note