CVE-2017-18368: billion 5200w-t firmware +2 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2017-18368

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 94,4%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada billion 5200w-t firmware, zyxel p660hn-t1a v2 firmware +1 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD. Masuk katalog KEV CISA pada 7 Agustus 2023, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited through the remote_host parameter.

Rincian

Terbit di NVD: 2 Mei 2019
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
EPSS (30 hari): 94,4% peluang dieksploitasi; lebih tinggi dari 99,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: Zyxel P660HN-T1A Routers Command Injection Vulnerability
Masuk KEV: 7 Agustus 2023
Tenggat CISA: 28 Agustus 2023 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
billion	5200w-t firmware	Versi 7.3.8.0
zyxel	p660hn-t1a v2 firmware	Versi 7.3.15.0
zyxel	p660hn-t1a v1 firmware	Versi 7.3.15.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-18368 pemerintah AS
https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt exploit · advisory pihak ketiga
https://seclists.org/fulldisclosure/2017/Jan/40 exploit · mailing list · advisory pihak ketiga
https://ssd-disclosure.com/index.php/archives/2910 exploit · deskripsi teknis · advisory pihak ketiga
https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems... deskripsi teknis · advisory pihak ketiga
http://www.zyxel.com/support/announcement_unauthenticated.shtml broken link

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.