Vulnerabilities > Billion > High

DATE CVE VULNERABILITY TITLE RISK
2020-01-09 CVE-2019-14919 Use of Hard-coded Credentials vulnerability in Billion Sg600 R2 Firmware 3.02
An exposed Telnet Service on the Billion Smart Energy Router SG600R2 with firmware v3.02.rc6 allows a local network attacker to authenticate via hardcoded credentials into a shell, gaining root execution privileges over the device.
local
low complexity
billion CWE-798
7.2
2019-05-02 CVE-2017-18371 Use of Hard-coded Credentials vulnerability in multiple products
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234.
network
low complexity
billion zyxel CWE-798
7.5