CVE-2017-18368 is a critical command injection vulnerability affecting ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 routers, specifically in the Remote System Log forwarding function accessible via the ViewLog.asp page. This unauthenticated flaw allows remote attackers to execute arbitrary commands with a CVSS score of 9.8 (CRITICAL), indicating high impact on confidentiality, integrity, and availability. The vulnerability is actively exploited in the wild, with public exploit modules available and significant community discussion, including observations of widespread exploitation attempts by various botnets like Gafgyt and EnemyBot.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
7.3.8.0CPE matchmatch criteria | cpe:2.3:o:billion:5200w-t_firmware:7.3.8.0:*:*:*:*:*:*:* | ||
7.3.15.0CPE matchmatch criteria | cpe:2.3:o:zyxel:p660hn-t1a_v2_firmware:7.3.15.0:*:*:*:*:*:*:* | ||
7.3.15.0CPE matchmatch criteria | cpe:2.3:o:zyxel:p660hn-t1a_v1_firmware:7.3.15.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.