Описание
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and password true. These accounts can be used to login to the web interface, exploit authenticated command injections and change router settings for malicious purposes.
Ссылки
- Broken Link
- ExploitThird Party Advisory
- ExploitMailing ListThird Party Advisory
- ExploitTechnical DescriptionThird Party Advisory
- Technical DescriptionThird Party Advisory
- Broken Link
- ExploitThird Party Advisory
- ExploitMailing ListThird Party Advisory
- ExploitTechnical DescriptionThird Party Advisory
- Technical DescriptionThird Party Advisory
Уязвимые конфигурации
Одновременно
Одновременно
Одновременно
EPSS
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
Связанные уязвимости
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and password true. These accounts can be used to login to the web interface, exploit authenticated command injections and change router settings for malicious purposes.
EPSS
8.8 High
CVSS3
9 Critical
CVSS2