[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fG9wX8gye8Tvo6as_l5o0m-aMrOYWs1T5_HiU8Q7s1Kw":3,"g5a-risk:CVE-2017-18371":175},{"success":4,"data":5,"meta":173},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":66,"references":67,"referencesCount":93,"weaknesses":94,"weaknessesCount":103,"isActivelyExploited":104,"cisaInfo":15,"otxData":15,"relatedBlogPosts":105,"seoMetadata":106,"configurations":131,"relatedVendorCves":164,"notableEvents":165},"CVE-2017-18371","What is CVE-2017-18371?","The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes.","The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service...","2019-05-02T17:29:01.067","2019-05-03T19:20:00.397",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.22531,[39,39,39,39,39,39,39],"Critical",[43,48,52,57,60,63],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"billion","5200w-t_firmware","7.3.8.0","cpe:2.3:o:billion:5200w-t_firmware:7.3.8.0:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"5200w-t","-","cpe:2.3:h:billion:5200w-t:-:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"zyxel","p660hn-t1a_v2_firmware","7.3.37.6","cpe:2.3:o:zyxel:p660hn-t1a_v2_firmware:7.3.37.6:*:*:*:*:*:*:*",{"vendor":53,"product":58,"version":50,"criteria":59,"vulnerable":4},"p660hn-t1a_v2","cpe:2.3:h:zyxel:p660hn-t1a_v2:-:*:*:*:*:*:*:*",{"vendor":53,"product":61,"version":55,"criteria":62,"vulnerable":4},"p660hn-t1a_v1_firmware","cpe:2.3:o:zyxel:p660hn-t1a_v1_firmware:7.3.37.6:*:*:*:*:*:*:*",{"vendor":53,"product":64,"version":50,"criteria":65,"vulnerable":4},"p660hn-t1a_v1","cpe:2.3:h:zyxel:p660hn-t1a_v1:-:*:*:*:*:*:*:*",6,[68,73,79,84,89],{"url":69,"source":70,"tags":71},"http:\u002F\u002Fwww.zyxel.com\u002Fsupport\u002Fannouncement_unauthenticated.shtml","Zyxel",[72],"Broken Link",{"url":74,"source":75,"tags":76},"https:\u002F\u002Fraw.githubusercontent.com\u002Fpedrib\u002FPoC\u002Fmaster\u002Fadvisories\u002Fzyxel_trueonline.txt","Githubusercontent",[77,78],"Exploit","Third Party Advisory",{"url":80,"source":81,"tags":82},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2017\u002FJan\u002F40","Seclists",[83,77,78],"Mailing List",{"url":85,"source":86,"tags":87},"https:\u002F\u002Fssd-disclosure.com\u002Findex.php\u002Farchives\u002F2910","Ssd-disclosure",[77,88,78],"Technical Description",{"url":90,"source":91,"tags":92},"https:\u002F\u002Funit42.paloaltonetworks.com\u002Fnew-mirai-variant-targets-enterprise-wireless-presentation-display-systems\u002F","Paloaltonetworks",[88,78],5,[95],{"id":96,"name":97,"description":98,"extendedDescription":99,"status":100,"abstraction":101,"structure":102},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:","Draft","Base","Simple",1,false,[],{"title":107,"metaDescription":108,"keywords":109,"canonicalUrl":110,"structuredData":111},"What is CVE-2017-18371? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-18371, a critical severity cyber security vulnerability from 2019. The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router dis...","CVE-2017-18371, CVE-2017-18371 vulnerability, CVE-2017-18371 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, billion security, zyxel security, 5200w-t_firmware vulnerability, 5200w-t vulnerability, p660hn-t1a_v2_firmware vulnerability, p660hn-t1a_v2 vulnerability, p660hn-t1a_v1_firmware vulnerability","\u002Fwhat-is\u002Fcve-2017-18371",{"@context":112,"@type":113,"headline":107,"description":108,"datePublished":10,"dateModified":11,"author":114,"publisher":118,"about":122,"mainEntityOfPage":126,"articleSection":129,"keywords":130},"https:\u002F\u002Fschema.org","TechArticle",{"@type":115,"name":116,"url":117},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":115,"name":116,"url":117,"logo":119},{"@type":120,"url":121},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":123,"name":6,"description":124,"additionalType":125},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":127,"@id":128},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-18371","Cybersecurity","CVE-2017-18371, CVE-2017-18371 vulnerability, CVE-2017-18371 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[132,144,154],{"Operator":133,"Negate":15,"Nodes":134},"AND",[135,140],{"Operator":136,"Negate":15,"CPEMatch":137},"OR",[138],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":139,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C756E02F-45B7-4F40-AEEC-DCC334023F8B",{"Operator":136,"Negate":15,"CPEMatch":141},[142],{"Vulnerable":15,"Criteria":51,"MatchCriteriaID":143,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B8F97C92-C53D-4578-92ED-9327E3646FDB",{"Operator":133,"Negate":15,"Nodes":145},[146,150],{"Operator":136,"Negate":15,"CPEMatch":147},[148],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":149,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A338A056-6EC1-4CFB-A10D-1CB8D1771502",{"Operator":136,"Negate":15,"CPEMatch":151},[152],{"Vulnerable":15,"Criteria":59,"MatchCriteriaID":153,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1C6D563A-3210-4459-BE4D-5CC36CAF6784",{"Operator":133,"Negate":15,"Nodes":155},[156,160],{"Operator":136,"Negate":15,"CPEMatch":157},[158],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":159,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"524CE722-B1A3-43F9-84D5-F63B57D6BCC6",{"Operator":136,"Negate":15,"CPEMatch":161},[162],{"Vulnerable":15,"Criteria":65,"MatchCriteriaID":163,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3AF29B50-0AE2-444C-A251-C27DEBDC064B",[],[166],{"id":167,"eventType":168,"eventTime":169,"details":170,"label":171,"color":172},"1663fffc-c93e-42bd-90af-f34459e56e55","LOW_EPSS_DELTA","2026-06-16T04:06:23.697758+00:00","Daily EPSS score decreased by 0.502 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":174,"version":33},1792367736934,{"score":176,"band":177,"action":178,"scoredAt":179},63,"Medium","Plan remediation","2026-10-16T06:46:04.633485+00:00"]