Read the docs
TI-2017-13546 Aliases CVE-2017-18373GHSA-46x2-283h-j6m2

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has…

Priority MEDIUM 46CWE-798Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-798.

Summary

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username user3 and and a long password consisting of a repetition of the string 0123456789. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes.

Why it matters now

EPSS 0.05384 92nd percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:billion:5200w-t_firmware:7.3.8.0:*:*:*:*:*:*:*7.3.8.0VulnerableBillion
cpe:2.3:h:billion:5200w-t:-:*:*:*:*:*:*:*not specified by NVDRunning onBillion
  • cpe:2.3:o:billion:5200w-t_firmware:7.3.8.0:*:*:*:*:*:*:* Versions 7.3.8.0 Vulnerable ·Billion
  • cpe:2.3:h:billion:5200w-t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Billion

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-18373
  2. 2026-10-03 Alias added: GHSA-46x2-283h-j6m2

References

Exploit 3

  • TI-2017-13541 The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by… KEVCVSS 3.1CRITICAL 9.8
  • TI-2017-13542 The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command… CVSS 3.0CRITICAL 9.8
  • TI-2017-13544 The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three… CVSS 3.0CRITICAL 9.8
  • TI-2017-13543 The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a… CVSS 3.0HIGH 8.8
  • TI-2017-13545 The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has… CVSS 3.0HIGH 8.8
  • TI-2017-13547 The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by… CVSS 3.0HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences