CVE-2017-18368Zyxel P660HN-T1A Routers Command Injection Vulnerability
Bekannt ausgenutzt — Zyxel P660HN-T1A Routers Command Injection Vulnerability
CISA hat am 07.08.2023 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 28.08.2023.
Erforderliche Maßnahme: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-a-new-variant-of-gafgyt-malware; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerability-in-p660hn-t1a-dsl-cpe; https://nvd.nist.gov/vuln/detail/CVE-2017-18368
Beschreibung
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited through the remote_host parameter.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| billion | 5200w-t firmware | 7.3.8.0 | |
| zyxel | p660hn-t1a v1 firmware | 7.3.15.0 | |
| zyxel | p660hn-t1a v2 firmware | 7.3.15.0 |
Referenzen und Patches
- https://seclists.org/fulldisclosure/2017/Jan/40 ExploitMailing ListThird Party Advisory
- https://ssd-disclosure.com/index.php/archives/2910 ExploitTechnical DescriptionThird Party Advisory
- https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/ Technical DescriptionThird Party Advisory
- https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt ExploitThird Party Advisory
- http://www.zyxel.com/support/announcement_unauthenticated.shtml Broken Link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-18368 US Government Resource
CPE-Treffer (NVD) (3)
cpe:2.3:o:billion:5200w-t_firmware:7.3.8.0:*:*:*:*:*:*:*cpe:2.3:o:zyxel:p660hn-t1a_v2_firmware:7.3.15.0:*:*:*:*:*:*:*cpe:2.3:o:zyxel:p660hn-t1a_v1_firmware:7.3.15.0:*:*:*:*:*:*:*