CVE-2017-18373 Hardcoded credentials in n/a
Attackers can use hardcoded default credentials to access the router's web interface, enabling command injection and malicious configuration changes.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-18373?
CVE-2017-18373 is a high-severity vulnerability in n/a, published on 2 May 2019. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username user3 and and a long password consisting of a repetition of the string 0123456789. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes.
Weakness: CWE-798
Which versions are affected by CVE-2017-18373?
It affects 1 product.
Products include Billion 5200w-T Firmware.
How do I fix CVE-2017-18373?
No fix has been published for CVE-2017-18373 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-18373 being exploited?
There is no known exploitation of CVE-2017-18373 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-46x2-283h-j6m2.