Attackers Exploit Newly Disclosed Zyxel Vulnerability

Friday 08 January 2021

The impact of this issue announcement is high. Please act accordingly to rectify the issue, as stated below.

Products affected:

The issue impacts Zyxel, USG, ATP, VPN, ZyWALL, and USG FLEX devices.

What you need to know:

Multiple Zyxel firewall and WLAN controller products contain hardcoded credentials for an undocumented user account which has admin privileges, and its owner cannot change the password for it (CVE-2020-29583).

Actions to be taken:

Users are advised to download and install the recent firmware updates available.

Sources:

https://www.securityweek.com/hackers-start-exploiting-recently-disclosed-zyxel-vulnerability

Attackers Exploit Newly Disclosed Zyxel Vulnerability

Products affected:

What you need to know:

Actions to be taken:

Sources:

Further reading:

We protect. You Achieve.

Get in Touch

Subscribe for our updates

Attackers Exploit Newly Disclosed Zyxel Vulnerability

Products affected:

What you need to know:

Actions to be taken:

Sources:

Further reading:

Pulse Secure Releases Out-of-Cycle Fix for Zero Day Vulnerability

Qualys Findings Force Exim to Release Security Patches

Millions of Dell Computers Potentially Vulnerable to Malware and Rogue User Admin Attacks

Samba Releases Security Fix for Privilege Escalation Flaw

We protect. You Achieve.

Get in Touch

Subscribe for our updates