Zyxel Releases Security Updates

Threat ID:: CC-3710
Threat Severity:: Information only
Published:: 4 January 2021 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

Zyxel ATP, USG, USG FLEX, and VPN series firewalls Versions: ZLD 4.60

Zyxel NXC2500 and NXC5500 series access points Versions: 6.00 through 6.10

Threat details

Introduction

Zyxel has released security updates to address a hardcoded credential vulnerability affecting a number of their security firewall and access point products. A remote unauthenticated attacker could exploit this vulnerability to take control of an affected system.

Remediation advice

Affected organisations are encouraged to review Zyxel's security advisory for CVE-2020-29583 and apply any relevant updates.

Definitive source of threat updates

https://www.cisecurity.org/advisory/a-vulnerability-in-zyxel-firewall-and-ap-controllers-could-allow-for-administrative-access_2021-001/

CVE Vulnerabilities

Status Master

CVE-2020-29583

Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web interface with admin privileges.

Last edited: 12 January 2021 4:00 pm