CVE-2017-18370
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 24.4%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. The vulnerability is in the logSet.asp page and can be exploited through the ServerIP parameter. Authentication can be achieved by exploiting CVE-2017-18371.
- CVSS 3.0
- 8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 24.42% probability · 98th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-78
- Affected
- billion/5200w-t firmware · zyxel/p660hn-t1a v2 firmware · zyxel/p660hn-t1a v1 firmware
- Source
- cve@mitre.org
EPSS moved from 21.3% on 21 September 2026 to 24.4% on 27 October 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.
References
- http://www.zyxel.com/support/announcement_unauthenticated.shtmlBroken Link
- https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txtExploit, Third Party Advisory
- https://seclists.org/fulldisclosure/2017/Jan/40Exploit, Mailing List, Third Party Advisory
- https://ssd-disclosure.com/index.php/archives/2910Exploit, Technical Description, Third Party Advisory
- https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/Technical Description, Third Party Advisory
- http://www.zyxel.com/support/announcement_unauthenticated.shtmlBroken Link
- https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txtExploit, Third Party Advisory
- https://seclists.org/fulldisclosure/2017/Jan/40Exploit, Mailing List, Third Party Advisory
- https://ssd-disclosure.com/index.php/archives/2910Exploit, Technical Description, Third Party Advisory
- https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/Technical Description, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.