PatchTheCVEbillion vulnerabilities
Recent CVEs affecting billion products. 10 tracked.
billion has 10 tracked vulnerabilities, 3 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 2. Most recent: 2020-01-09. Highest priority: CVE-2017-18368 (score 97/100).
- CVE-2019-14920 HIGH 8.8 MITIGATE Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain root execution
- CVE-2019-14919 HIGH 7.8 MITIGATE An exposed Telnet Service on the Billion Smart Energy Router SG600R2 with firmware v3.02.rc6 allows a local ne
- CVE-2019-14918 MEDIUM 5.4 MITIGATE XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacke
- CVE-2017-18374 HIGH 8.8 MITIGATE MITIGATE The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two us
- CVE-2017-18373 HIGH 8.8 MITIGATE The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts w
- CVE-2017-18372 HIGH 8.8 MITIGATE MITIGATE The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection v
- CVE-2017-18371 CRITICAL 9.8 MITIGATE MITIGATE The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with def
- CVE-2017-18370 HIGH 8.8 MITIGATE MITIGATE The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerab
- CVE-2017-18369 CRITICAL 9.8 MITIGATE The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in t
- CVE-2017-18368 CRITICAL 9.8 EXPLOITED MITIGATE MITIGATE Zyxel P660HN-T1A Routers Command Injection Vulnerability
FAQ
How do I fix billion vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is billion being exploited right now?
Yes: 1 billion CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which billion CVE should I patch first?
CVE-2017-18368 currently ranks highest (97/100): Zyxel P660HN-T1A Routers Command Injection Vulnerability.