CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-12-22
Zyxel Firewalls and AP Controllers Hardcoded Admin Credentials Vulnerability (CVE-2020-29583) Analysis & Mitigation Guide
[Affected Scope] Zyxel USG, ATP, VPN, and ZyWALL series firewalls and AP controllers running ZLD firmware version 4.60
[Impact] Remote attackers can gain full administrative access to the device's SSH server or web interface using an undocumented hardcoded account ('zyfwp')
[Mitigation] Immediately upgrade to ZLD v4.60 Patch 1 or later, and restrict WAN-side access to management interfaces (SSH/HTTPS).