CVE-2017-18372

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 21.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-05-02 · updated 2026-06-17
Weakness: CWE-78

Description

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the tools_time.asp page and can be exploited through the uiViewSNTPServer parameter. Authentication can be achieved by exploiting CVE-2017-18373.

Affected products

Billion 5200W-T Firmware: 7.3.8.0
Zyxel P660Hn-T1A V1 Firmware: 7.3.15.0
Zyxel P660Hn-T1A V2 Firmware: 7.3.15.0

References

https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt
https://seclists.org/fulldisclosure/2017/Jan/40
https://ssd-disclosure.com/index.php/archives/2910
https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt
https://seclists.org/fulldisclosure/2017/Jan/40
https://ssd-disclosure.com/index.php/archives/2910

Get alerted when CVE-2017-18372 or the next vulnerability affects your stack