What’s Vulnerable › Vulnerabilities

CVE-2017-18369

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 67.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-05-02 · updated 2026-06-17
• Weakness: CWE-78

Description

The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the adv_remotelog.asp page and can be exploited through the syslogServerAddr parameter.

Affected products

• Billion 5200W-T Firmware: 1.02b-rc5.dt49

References

• https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt
• https://seclists.org/fulldisclosure/2017/Jan/40
• https://ssd-disclosure.com/index.php/archives/2910
• https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt
• https://seclists.org/fulldisclosure/2017/Jan/40
• https://ssd-disclosure.com/index.php/archives/2910

Get alerted when CVE-2017-18369 or the next vulnerability affects your stack