Secret Backdoor Account Found in Several Zyxel Firewall, VPN Products

🗓️ 01 Jan 2021 13:49:00Reported by The Hacker NewsType

Zyxel patches CVE-2020-29583 backdoor with hardcoded password enabling admin access on devices.

Reporter	Title	Published	Views	Family All 25
GithubExploit	Exploit for Insufficiently Protected Credentials in Zyxel Usg20-Vpn_Firmware	4 Jan 202100:56	–	githubexploit
ICS	People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices	10 Jun 202212:00	–	ics
ATTACKERKB	CVE-2020-29583 Zyxel USG Hard-Coded Admin Creds	22 Dec 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of microprogrammed network devices such as ZyXEL USG, USG VPN, ATP, ZyWALL, and FLEX lies in the unencrypted storage of data, which allows attackers to gain unauthorized access to protected information.	30 Mar 202100:00	–	bdu_fstec
Circl	CVE-2020-29583	23 Dec 202000:53	–	circl
CISA KEV Catalog	Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	MS-ISAC Releases Cybersecurity Advisory on Zyxel Firewalls and AP Controllers	8 Jan 202100:00	–	cisa
CNNVD	Zyxel USG Series Encryption Issues Vulnerabilities	22 Dec 202000:00	–	cnnvd
CVE	CVE-2020-29583	22 Dec 202000:00	–	cve
Cvelist	CVE-2020-29583	22 Dec 202000:00	–	cvelist