CVE-2017-18373

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded…

published May 2, 2019

CVSS
—
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username user3 and and a long password consisting of a repetition of the string 0123456789. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05384 · 92.6th percentile
Published
2019-05-02T16:15Z
EPSS history
Timeline
  • 02 MAY 16:15Z
    The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded…
    cvelistv5