Billion vulnerabilities1 known to be exploited.
Billion has 10 published vulnerabilities across 4 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is 5200w-T, with 7. If you run Billion software, patch the exploited flaws first.
The most recent Billion flaw added to the known-exploited list is CVE-2017-18368, on 7 August 2023. We keep watching the known-exploited list.
Which Billion products have the most vulnerabilities?
5200w-T leads with 7 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Billion vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Zyxel P660HN-T1A Routers Command Injection Vulnerability
Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user and exploited via the remote_host parameter of the...
Which Billion flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 94%
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an...
- 68%CVE-2017-18369Critical
The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user.
- 24%CVE-2017-18370High
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user.
- 23%CVE-2017-18371Critical
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true,...
- 22%CVE-2017-18372High
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user.
- 5.5%CVE-2017-18374High
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and...
- 5.4%CVE-2017-18373High
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password...
- 2.2%CVE-2019-14920High
Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain root execution privileges over the device via a hidden etc_ro/web/adm/system_command.asp shell feature.
- 1.5%CVE-2019-14919High
An exposed Telnet Service on the Billion Smart Energy Router SG600R2 with firmware v3.02.rc6 allows a local network attacker to authenticate via hardcoded credentials into a shell, gaining root execution privileges...
- 0.8%CVE-2019-14918Medium
XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to inject arbitrary HTML/JavaScript code to achieve client-side code execution via crafted DHCP request...
All Billion products we track.
2 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- 5200w-T Firmware5200w-t_firmware7 vulnerabilities2 versions
- Sg600 R2 Firmwaresg600_r2_firmware3 vulnerabilities1 version
This directory lists the 2 Billion products with at least one tracked version, of 4 in our catalogue.
Running Billion? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user and exploited via the remote_host parameter of the ViewLog.asp page.
- Matched to
- Billion on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 10 published vulnerabilities across 4 products and 3 versions from Billion. The most recent Billion flaw added to the known-exploited list is CVE-2017-18368, on 7 August 2023.
1 Billion vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2017-18368. The full list is on this page.
5200w-T, with 7 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Billion products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.