CVE-2017-18368VulnerabilityPublished 08/07/2023Updated 10/24/2026
CVE-2017-18368: Zyxel P660HN-T1A Routers Command Injection Vulnerability
Affects Zyxel P660HN-T1A RoutersSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 08/07/2023
- KEV deadline
- 08/28/2023
- EPSS
- 94.5% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-a-new-variant-of-gafgyt-malware (opens in a new tab)
- zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerability-in-p660hn-t1a-dsl-cpe (opens in a new tab)
- nvd.nist.gov/vuln/detail/CVE-2017-18368 (opens in a new tab)
Description
Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user and exploited via the remote_host parameter of the ViewLog.asp page.
Weaknesses
References
- zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-a-new-variant-of-gafgyt-malware (opens in a new tab)
- zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerability-in-p660hn-t1a-dsl-cpe (opens in a new tab)
- nvd.nist.gov/vuln/detail/CVE-2017-18368 (opens in a new tab)
- cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2017-18368 (opens in a new tab)