VulnerabilityModified

CVE-2017-18370

HIGH 8.8EPSS 24.4%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 24.4%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. The vulnerability is in the logSet.asp page and can be exploited through the ServerIP parameter. Authentication can be achieved by exploiting CVE-2017-18371.

CVSS 3.0: 8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 24.42% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-78
Affected: billion/5200w-t firmware · zyxel/p660hn-t1a v2 firmware · zyxel/p660hn-t1a v1 firmware
Source: cve@mitre.org

References

http://www.zyxel.com/support/announcement_unauthenticated.shtmlBroken Link
https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txtExploit, Third Party Advisory
https://seclists.org/fulldisclosure/2017/Jan/40Exploit, Mailing List, Third Party Advisory
https://ssd-disclosure.com/index.php/archives/2910Exploit, Technical Description, Third Party Advisory
https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/Technical Description, Third Party Advisory
http://www.zyxel.com/support/announcement_unauthenticated.shtmlBroken Link
https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txtExploit, Third Party Advisory
https://seclists.org/fulldisclosure/2017/Jan/40Exploit, Mailing List, Third Party Advisory
https://ssd-disclosure.com/index.php/archives/2910Exploit, Technical Description, Third Party Advisory
https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/Technical Description, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.