Live › vulnerability › CVE-2017-18368
Go to dashboardZyxel P660HN-T1A routers have a command injection flaw in the Remote System Log forwarding function, reached through the remote_host parameter of the ViewLog.asp page. An unauthenticated attacker can run commands on the router.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Zyxel P660HN-T1A Routers | vendor | – | – |
| billion 5200w-t firmware | vendor | = 7.3.8.0 | – |
| zyxel p660hn-t1a v2 firmware | vendor | = 7.3.15.0 | – |
| zyxel p660hn-t1a v1 firmware | vendor | = 7.3.15.0 | – |
Unknown from the sources.
Apply the mitigations per the vendor instructions, or discontinue use of the product if mitigations are unavailable (per CISA required action).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user and exploited via the remote_host parameter of the ViewLog.asp page.
CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2017-18368")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.