Zyxel Releases Security Update

Zyxel releases security update addressing a Critical vulnerability in 4G LTE indoor routers

Threat ID:: CC-4273
Threat Severity:: Information only
Published:: 24 February 2023 12:31 PM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Zyxel releases security update addressing a Critical vulnerability in 4G LTE indoor routers

Affected platforms

The following platforms are known to be affected:

Zyxel 4G LTE Router

Affected models

LTE3202-M437
LTE3316-M604

Threat details

Introduction

Zyxel has released security update to address a Critical vulnerability in 4G LTE indoor routers LTE3202-M437 and LTE3316-M604. The vulnerability known as CVE-2023-22920, has a CVSSv3 score of 9.8 and relates to a security misconfiguration due to a factory default intended for testing purposes. A remote attacker could leverage this vulnerability to access an affected device using Telnet.

Remediation advice

Affected organisations are encouraged to review Zyxel's security advisory and apply relevant updates and mitigations.

Definitive source of threat updates

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-security-misconfiguration-vulnerability-of-4g-lte-indoor-routers

CVE Vulnerabilities

Status Published

CVE-2023-22920

A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00(ABMP.6)C0 due to a factory default misconfiguration intended for testing purposes. A remote attacker could leverage this vulnerability to access an affected device using Telnet.

Last edited: 24 February 2023 12:31 pm