PT-2019-8309 · Zyxel · Zyxel P660Hn-T1A

Pedro Ribeiro · Published 2019-05-02 · Updated 2019-05-03 · CVE-2017-18374

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZyXEL P660HN-T1A version $7.3.15.0 v001 / 3.40(ULM.0)b31

Description The issue concerns default passwords for two user accounts in the router, including a hardcoded service account with the username true and password true. These default credentials can be exploited to log in to the web interface, execute authenticated command injections, and modify router settings for malicious purposes.

Recommendations For ZyXEL P660HN-T1A version $7.3.15.0 v001 / 3.40(ULM.0)b31, change the default passwords of the user accounts, especially the hardcoded service account with the username true and password true, to prevent unauthorized access and potential exploitation.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2017-18374

Affected Products

Zyxel P660Hn-T1A

References · 7

• 🔥 https://ssd-disclosure.com/index.php/archives/2910 · Exploit
• 🔥 https://seclists.org/fulldisclosure/2017/Jan/40 · Exploit
• 🔥 https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt · Exploit
• https://osv.dev/vulnerability/CVE-2017-18374 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18374 · Security Note
• http://zyxel.com/support/announcement_unauthenticated.shtml · Note
• https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems · Note