Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2019-05-02	CVE-2017-18368	OS Command Injection vulnerability in multiple products The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. network low complexity billion zyxel CWE-78 critical	9.8
2019-05-02	CVE-2017-18369	OS Command Injection vulnerability in Billion 5200W-T Firmware 1.02B The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. network low complexity billion CWE-78 critical	9.8
2019-05-02	CVE-2017-18371	Use of Hard-coded Credentials vulnerability in multiple products The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. network low complexity billion zyxel CWE-798 critical	9.8