Watch Out! Zyxel Firewalls and VPNs Under Active Cyberattack

🗓️ 25 Jun 2021 10:37:00Reported by The Hacker NewsType

Zyxel Firewalls and VPNs Under Active Cyberattack. Taiwanese networking equipment company Zyxel is warning customers of an ongoing attack targeting a "small subset" of its security products such as firewall and VPN servers. The attacks single out appliances that have remote management or SSL VPN enabled, implying that the targeted devices are publicly accessible over the internet

Reporter	Title	Published	Views	Family All 26
GithubExploit	Exploit for Insufficiently Protected Credentials in Zyxel Usg20-Vpn_Firmware	4 Jan 202100:56	–	githubexploit
ICS	People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices	10 Jun 202212:00	–	ics
ATTACKERKB	CVE-2020-29583 Zyxel USG Hard-Coded Admin Creds	22 Dec 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of microprogrammed network devices such as ZyXEL USG, USG VPN, ATP, ZyWALL, and FLEX lies in the unencrypted storage of data, which allows attackers to gain unauthorized access to protected information.	30 Mar 202100:00	–	bdu_fstec
Circl	CVE-2020-29583	23 Dec 202000:53	–	circl
CISA KEV Catalog	Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	MS-ISAC Releases Cybersecurity Advisory on Zyxel Firewalls and AP Controllers	8 Jan 202100:00	–	cisa
CNNVD	Zyxel USG Series Encryption Issues Vulnerabilities	22 Dec 202000:00	–	cnnvd
CVE	CVE-2020-29583	22 Dec 202000:00	–	cve
Cvelist	CVE-2020-29583	22 Dec 202000:00	–	cvelist