CVE-2017-18372
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 21.9%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the tools_time.asp page and can be exploited through the uiViewSNTPServer parameter. Authentication can be achieved by exploiting CVE-2017-18373.
- CVSS 3.0
- 8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 21.89% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-78
- Affected
- billion/5200w-t firmware · zyxel/p660hn-t1a v2 firmware · zyxel/p660hn-t1a v1 firmware
- Source
- cve@mitre.org
References
- https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txtExploit, Third Party Advisory
- https://seclists.org/fulldisclosure/2017/Jan/40Exploit, Mailing List, Third Party Advisory
- https://ssd-disclosure.com/index.php/archives/2910Exploit, Technical Description, Third Party Advisory
- https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txtExploit, Third Party Advisory
- https://seclists.org/fulldisclosure/2017/Jan/40Exploit, Mailing List, Third Party Advisory
- https://ssd-disclosure.com/index.php/archives/2910Exploit, Technical Description, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.