Priority MEDIUM 46
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and password…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.05503 · Published 2019-05-02 · No fix listed CWE-798
Priority MEDIUM 46
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true,…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.05384 · Published 2019-05-02 · No fix listed CWE-798
Priority MEDIUM 58
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.21887 · Published 2019-05-02 · No fix listed CWE-78
Priority MEDIUM 62
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and an…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.22531 · Published 2019-05-02 · No fix listed CWE-798
Priority MEDIUM 59
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.24423 · Published 2019-05-02 · No fix listed CWE-78
Priority HIGH 79
The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.67644 · Published 2019-05-02 · No fix listed CWE-78
Priority CRITICAL 100KEV
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenti…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.94508 · Published 2019-05-02 · No fix listed CWE-78