CVE-2017-18374

The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default passwords, including a…

published May 2, 2019

CVSS
—
EPSS
6%
Percentile
92.7
In the wild
Unconfirmed
What it is

The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and password true. These accounts can be used to login to the web interface, exploit authenticated command injections and change router settings for malicious purposes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05503 · 92.7th percentile
Published
2019-05-02T16:15Z
EPSS history
Timeline
  • 02 MAY 16:15Z
    The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default passwords, including a…
    cvelistv5