TrueOnline.ZyXEL.P660HN.V1.Unauthenticated.Command.Injection

Description

This indicates an attack attempt against a Code Injection vulnerability in ZyXEL P660HN-T router.
The vulnerability is due to an error when the vulnerable software handles a maliciously crafted HTTP request. A remote attacker may be able to exploit this to execute arbitrary code on the affected systems.

Outbreak Alert

A command injection vulnerability that allows remote attackers to easily exploit CWP (Control Web Panel) with a crafted HTTP request which can result in Remote Code Execution. According to Shodan, there are thousands of servers that could still be vulnerable to CVE-2022-44877. This vulnerability can be leveraged to perform ransomware attacks or exfiltration of data.

View the full Outbreak Alert Report

Affected Products

ZyXEL P660HN-T v1

Impact

System Compromise: Remote attacker can gain control of vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch for this issue.