What’s Vulnerable › Vulnerabilities

CVE-2018-18754

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-10-29 · updated 2026-06-17
• Weakness: CWE-522

Description

ZyXEL VMG3312-B10B 1.00(AAPP.7) devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/default.cfg file.

Affected products

• Zyxel Vmg3312-B10B Firmware: 1.00(aapp.7)

References

• https://gist.github.com/numanturle/c99d3306e9e4e17bb2164dde363406bc
• https://gist.github.com/numanturle/c99d3306e9e4e17bb2164dde363406bc

Get alerted when CVE-2018-18754 or the next vulnerability affects your stack