CVE-2020-29583 Zyxel USG Hard-Coded Admin Creds

🗓️ 22 Dec 2020 00:00:00Reported by AttackerKBType

attackerkb

attackerkb🔗 attackerkb.com👁 221 Views

Zyxel USG Hard-Coded Admin Creds in Firmware v4.6

Reporter	Title	Published	Views	Family All 25
GithubExploit	Exploit for Insufficiently Protected Credentials in Zyxel Usg20-Vpn_Firmware	4 Jan 202100:56	–	githubexploit
ICS	People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices	10 Jun 202212:00	–	ics
BDU FSTEC	The vulnerability of microprogrammed network devices such as ZyXEL USG, USG VPN, ATP, ZyWALL, and FLEX lies in the unencrypted storage of data, which allows attackers to gain unauthorized access to protected information.	30 Mar 202100:00	–	bdu_fstec
Circl	CVE-2020-29583	23 Dec 202000:53	–	circl
CISA KEV Catalog	Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	MS-ISAC Releases Cybersecurity Advisory on Zyxel Firewalls and AP Controllers	8 Jan 202100:00	–	cisa
CNNVD	Zyxel USG Series Encryption Issues Vulnerabilities	22 Dec 202000:00	–	cnnvd
CVE	CVE-2020-29583	22 Dec 202000:00	–	cve
Cvelist	CVE-2020-29583	22 Dec 202000:00	–	cvelist
NCSC	Serious vulnerability fixed in Zyxel products	23 Dec 202000:00	–	ncsc

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-29583
zyxel	www.zyxel.com/us/en/support/CVE-2020-29583.shtml
ftp	www.ftp.zyxel.com/USG40/firmware/USG40_4.60(AALA.1)C0_2.pdf
zyxel	www.zyxel.com/support/CVE-2020-29583.shtml
threatpost	www.threatpost.com/cybercriminals-exploits-zyxel-flaw/162789/
businessforum	www.businessforum.zyxel.com/discussion/5254/whats-new-for-zld4-60-patch-1-available-on-dec-15
businessforum	www.businessforum.zyxel.com/discussion/5252/zld-v4-60-revoke-and-wk48-firmware-release
eyecontrol	www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html
zyxel	www.zyxel.com/support/security_advisories.shtml
secpod	www.secpod.com/blog/a-secret-zyxel-firewall-and-ap-controllers-could-allow-for-administrative-access-cve-2020-29583/

21 Oct 2025 00:00Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

CVSS 210

EPSS0.90049

SSVC

zyxel usg hard-coded credentials firmware vulnerability undocumented account administrative privileges exploitation security researchers