Username and Password Leaves Over 100,000 Zyxel Firewalls and VPN Gateways Vulnerable to Serious Attacks

A crucial vulnerability found by the Dutch security specialist at EYE enables hackers to "completely compromise the confidentiality, integrity and availability" of more than 100,000 Zyxel firewalls, VPN gateways, and access point controllers.

Spotted by ZDNet, an underreported vulnerability has been created by an exposed username and password with administrator privileges, which is a hardcoded backdoor device. The backdoor enables hackers to gain root access or full power, to devices through both the SSH and site administration interface panels recorded by the outlet. The affected firewalls running the ZLD V4.60 firmware include the ATP series, the USG series, the USG FLEX series, and the VPN series. The NXC2500 and NXC5500 AP controllers were also compromised.

A full list of affected devices and their patches can be found here: https://businessforum.zyxel.com/discussion/5252/zld-v4-60-revoke-and-wk48-firmware-release

Niels Teusink, EYE's senior cybersecurity expert who found the exposed username and password, said that the vulnerability could be catastrophic for small and medium-sized companies when combined with others. The specialist clarified that the plaintext password was visible in one of the device binaries.

"An attacker could completely compromise the confidentiality, integrity, and availability of the device," Teusink wrote in a vulnerability report. "Somebody could, for example, change the firewall settings to allow or block certain traffic. They might also intercept traffic or set up VPN accounts to gain access to the network behind the computer."

Teusink stressed that Zyxel—which provides network products to a broad range of customers, from personal to business—is a familiar firewall brand for small and medium-sized enterprises. Given that many people work from home, VPN-enabled devices, such as Zyxel's USG product line, often used as a firewall or VPN gateway, have been selling well lately.

Zyxel claimed that the exposed account was configured to deliver automatic firmware updates to FTP's connected access points. In an incident warning, the company reported that it advised users to install the updates in force.

EYE disclosed the backdoor to Zyxel at the end of November and said that the company replied promptly and continued to fix the problem. Zyxel released its report on the incident at the end of December and provided patches for some, though not all, of the affected devices. For example, a patch for some of its AP controllers will be published in April.

Vulnerabilities like these have become increasingly popular in recent years. In the case of VPNs, the Cyber Security and Infrastructure Security Agency warns that because they are 24/7, organizations are less likely to keep them up to date with the latest security updates and patches. This was reiterated by Teusink, who said that most users of the affected devices do not update the firmware very much in EYE's experience.

We've all got plenty to worry about without worrying about being hacked, so do your best to stop it.

150 comments

  1. slonned
  2. slonned
  3. Jfzpuj
  4. Mvsmzs

    priligy 60mg - cialis 60mg online where to get generic cialis

  5. Xgdhbk

    deltasone 5 mg price - prednisone 10 mg price buy prednisone online fast shipping

  6. Hcgjrb

    provigil generic - generic provigil order provigil

  7. Glrnho

    50mg accutane - best accutane brand accutane cost generic

  8. Aqqtpo

    amoxicillin for uti - amoxicillin for sale for humans amoxicillin for sinus infection

  9. Uhaxgz

    order vardenafil 20mg - buy vardenafil online overnight delivery generic vardenafil online

  10. Homdnj

    where to buy ivermectin pills - stromectol tablets for humans for sale stromectol coupon

  11. Kqsbsw

    female cialis australia - cialis offer cialis in mexico over the counter

  12. Rpfrko

    cost of ivermectin medicine - ivermectin malaria stromectol tablets buy online

  13. junimeridio

    disappear does canada use hydroxychloroquine coach [url=https://hydroxychloroquined.online/ ]hydroxychloroquine france[/url] physiatrist plaquenil hydroxychloroquine stock market

  14. Tkoyrr

    isotretinoin 30mg - accutane canada 40mg where to buy accutane

  15. Rxqsur

    lyrica canada online - canada drug pharmacy canadian pharmacy store

  16. Xmtssh

    amoxicillin price at walgreens - amoxicillin without a doctor's prescription amoxicilina 500 mg

  17. Nntbnq

    how to buy real viagra - 10mg viagra tablets sildenafil citrate india

  18. Zgkcgs

    canadian pharmacy tadalafil - cialis best buy cialis 60

  19. Gtyntw

    ivermectin buy uk - ivermectin 3mg tablets ivermectin rx

  20. Vmtalh

    how to get prednisone over the counter - mail order prednisone prednisone 10mg tablet price

  21. Lpgdaw

    modafinil reddit - modafinil and caffeine provigil for sale

  22. Williamsmesk

    dating websites new
    [url="http://onlinedatinglook.com/?"]dating online [/url]

  23. Williamsmesk

    dating seiten
    [url="http://onlinedatinglook.com/?"]indian dating[/url]

  24. Williamsmesk

    free adult personals site
    [url="http://datingsitesfirst.com/?"]adam for adam gay online dating[/url]

  25. Cfgonl

    azithromycin 100mg dose - buy zithromax 100mg order azithromycin 250mg

  26. Williamsmesk

    single free dating sites without registering
    [url="http://datingsitesover.com/?"]courting vs dating[/url]

  27. Williamsmesk

    free meet me site
    [url="http://onlinedatingtwo.com/?"]meet singles [/url]

  28. Umvetb

    lasix uses - lasix 12.5mg cost furosemide 50 mg tablets

  29. Dnygli

    buy clomid 50mg - generic clomid clomid generic

  30. Vhmjro

    viagra 25 mg order - buy sildenafil india cheap sildenafil tablets 100mg

  31. KevinLig

    3d gay dating game
    gay big and tall dating
    http://freegaychatnew.com?

  32. Ykkqgv

    tadalafil india 10 mg - tadalafil daily online buy cheap cialis online canada

  33. KevinLig

    walmart's video gay dating
    gay dating tumblr
    [url="http://gaydatingzz.com?"]gay geek dating[/url]

  34. KevinLig

    gay dating for 15 year olds
    omar mateen on gay dating site
    [url="http://gaydatingzz.com?"]dating asian gay men[/url]

  35. Pixdyy

    can i buy ivermectin online - ivermectin ireland buy ivermectin

  36. KevinLig

    gay dating romeo
    100 gay dating
    [url="http://freegaychatnew.com?"]belgian gay dating site[/url]

  37. Slucut

    best online casino real money - casino online games casinos

  38. KevinLig

    dating sites for gay bears
    binghamton gay dating sights
    [url="http://gaychatus.com?"]gay dating in seattle[/url]

  39. KevinLig

    daddy gay son dating sites
    gay speed dating in chicago
    [url="http://gaydatingzz.com?"]gay dating targeted individuals[/url]

  40. Ohpsdl

    gnc ed pills - home remedies for erectile dysfunction shark tank ed pill episode

  41. KevinLig

    gay nyc dating
    speed dating nyc gay
    [url="http://gaydatingzz.com?"]kidloves gay dating[/url]

  42. Qqmzsq

    where can i buy prednisone online - prednisone 40 mg pills 120 mg prednisone

  43. KevinLig

    new gay dating
    gay dating events london
    [url="http://gaychatrooms.org?"]terre haute gay dating[/url]

  44. KevinLig

    dating a religious guy gay
    gay dating tours
    [url="http://freegaychatnew.com?"]gay dating websites pakistan[/url]

  45. KevinLig

    gay indian dating in chicago
    gay dating hastings
    [url="http://gaychatrooms.org?"]legit gay dating sites[/url]

  46. Dmqlxx

    i need viagra - sildenafil 50mg india sildenafil india paypal

  47. KevinLig

    gay fetish dating site
    gay dating furry sim
    [url="http://gaychatrooms.org?"]gay asian dating sites[/url]

  48. Piuaxh

    average cost of 20mg cialis - Cialis buy cheap brand cialis online

  49. KevinLig

    gay guy explicit dating games
    gay dating sim on top
    [url="http://gaychatrooms.org?"]gay dating sites in flordia[/url]

  50. KevinLig

    gay dating sites relationships
    good free gay dating websites
    [url="http://gaychatgay.com?"]hogwarts a mystery dating gay[/url]

  51. KevinLig

    good free gay dating site
    gay dating ct
    [url="http://gaychatgay.com?"]craigslist gay dating site[/url]

  52. Vvcsmh

    ivermectin brand name - stromectol buy nz buy ivermectin

  53. KevinLig

    gay dating boston ma
    gay dating opinion piece
    [url="http://gaychatus.com?"]chennsi gay dating[/url]

  54. Msfiqf

    erectile dysfunction treatments - overcoming ed best over the counter ed pills

  55. Jvalcj

    Albuterol online - buy ventolin ventolin cost canada

  56. Hnorka

    cytotec 200mg pills generic - cytotec tablets india cytotec for induction of labor

  57. Gmkzam

    doxycycline no prescription best prices - doxycycline 100mg over the counter doxycycline australia

  58. Zclgxw

    neurontin 300mg capsule - buying neurontin without a prescription synthroid tab 137.5mcg

  59. Oscineded

    http://buysildenshop.com/ - uk cheapest viagra

  60. Cmikfj

    viagra without script - where can you get viagra over the counter

  61. sefeanaps
  62. Propecia

    Viagra Dresden

  63. itewhex

    https://buypropeciaon.com/ - buy finasteride 5mg with amex

  64. ivermectin pills online

    Vad Ar Propecia

  65. traitly
  66. Wilhemina

    An impressive share! I've just forwarded this onto a co-worker who
    has been doing a little research on this. And he in fact ordered me dinner because I discovered
    it for him... lol. So allow me to reword this.... Thank YOU for the meal!!
    But yeah, thanks for spending the time to discuss this matter
    here on your web hosting where site.

  67. Sqftkj

    when will generic vardenafil be available in the us - ordering vardenafil online vardenafil pill

  68. viagra 25 mg

    Propecia Hair Back All

  69. Regan

    Thank you for the auspicious writeup. It quest bars in (t.co)
    fact was a entertainment account it. Look complex to more introduced agreeable
    from you! However, how can we keep in touch?

  70. Titismles

    https://buystromectolon.com/ - buy stromectol for humans in mexico

  71. itewhex

    http://buypropeciaon.com/ - finasteride prescription

  72. Zliptw

    generic name for ivermectin - buy oral ivermectin ivermectin price uk

  73. NoffAnend

    https://buytadalafshop.com/ - is there a generic cialis available

  74. PatrickSix

    gay online dating websites
    gay porn dating sim
    [url="http://freegaychatnew.com?"]rich gay dating sites[/url]

  75. Isis

    What's up to every body, it's my first pay a visit of this blog; this website carries
    remarkable and truly excellent stuff designed for visitors.

    Check out my web blog; asmr that

  76. Lanny

    You are so interesting! I don't think I have read anything like that before.

    So good to discover someone with a scoliosis surgery few genuine thoughts on this issue.
    Seriously.. thank you for starting this up. This website is one thing
    that is needed on the web, someone with a bit of originality!

  77. Gxpily

    prednisone 20 mg purchase - prednisone 50 mg tablet cost prednisone 30 mg price

  78. PatrickSix

    dating gay lesbian service
    gay autistic dating
    [url="http://freegaychatnew.com?"]dating fat gay bears[/url]

  79. Zxuqwt

    accutane drug - accutane india cost accutane pills online

  80. PatrickSix

    top gay dating sites 2021
    safe gay dating sites
    [url="http://gaychatgay.com?"]gay men dating trans[/url]

  81. Trisha

    What i don't understood is in reality how you're not really a lot more well-appreciated than you may be now.
    You're very intelligent. You recognize thus considerably on the subject of asmr this (bitly.com) matter, made me personally believe it
    from a lot of numerous angles. Its like women and
    men don't seem to be interested except it is something to accomplish with
    Lady gaga! Your personal stuffs outstanding.
    All the time maintain it up!

  82. Snazwh

    amoxicilina 500 mg - amoxicillin pneumonia amoxicillin over counter

  83. Anderson

    I constantly spent my half an hour to read this blog's articles every day along with a cup of coffee.

    Have a look at my web site; is asmr

  84. PatrickSix

    i hate dating gay
    best gay dating documentaries
    [url="http://freegaychatnew.com?"]gay dating site reviews[/url]

  85. PatrickSix

    adam plus adam gay dating
    is dream daddy a gay dating sim
    [url="http://gaychatgay.com?"]13 year old gay boy dating site[/url]

  86. traitly
  87. Viagra

    acheter du cialis securise

  88. PatrickSix

    dating during divorce gay
    dating trans girl is being gay
    [url="http://freegaychatnew.com?"]dating a bodybuilder gay[/url]

  89. Sue

    We stumbled over here coming from a different page and thought
    I may as well check things out. I like what I
    see so now i am following you. Look forward to looking into your web page again.

    Here is my page: asmr this (http://j.mp/2WShZQd)

  90. Maggie

    Thanks for sharing your thoughts on a. Regards

    Also visit my webpage: scoliosis surgery in

  91. Cwbajy

    generic methylprednisolone - methylprednisolone buy lyrica 150mg

  92. PatrickSix

    poz gay dating site
    speed dating for gay guys
    [url="http://freegaychatnew.com?"]free gay online dating service[/url]

  93. Maroweawl
  94. Michaelnix

    two gay bottoms dating
    gay philippines dating site
    [url="dating-gaym.com?"]gay dating taiwan sites[/url]

  95. Gryqln

    my favorite writer essay - buy essay cheap write research paper

  96. Michaelnix

    mature gay men dating site
    dating timeline gay
    [url="datinggayservices.com?"]gay men's dating[/url]

  97. Maroweawl
  98. cialis 20mg price

    Effet Du Cialis 10mg

  99. Oscineded

    https://buysildenshop.com/ - viagra going generic

  100. Michaelnix

    gay ramnichel gypsy dating
    gay dating websites uk
    [url="gayonlinedating.net?"]dating orlando gay[/url]

  101. buy fincar 5mg cheap

    Prix Du Cialis Avec Ordonnance

  102. Kfpwyw

    viagra 60 mg - Overnight delivery viagra how to buy generic viagra

  103. Michaelnix

    silver gay daddies dating
    7 year age gap gay dating
    [url="gayonlinedating.net?"]gay singles dating[/url]

  104. Yhmzsx

    cialis generic best price canada - Original brand cialis cost of 5mg cialis

  105. Henrybrura

    hiv pos gay dating sites
    grandpa gay dating sites
    [url="http://gaydatingcanada.com?"]gay dating websites 2021[/url]

  106. Henrybrura

    dating gay places philadelphia
    ohmojo gay dating gay massage
    [url="http://gaydatingcanada.com?"]black white gay dating[/url]

  107. Henrybrura

    dayton gay dating scene
    reddit gay friends dating
    [url="http://gay-singles-dating.com?"]gay chubs dating site[/url]

  108. Cialis

    cialis premature ejaculations

  109. poidayrap
  110. Titismles

    https://buystromectolon.com/ - stromectol tablete

  111. Stromectol

    Amoxicillin Antibiotic Side Effects

  112. Fapwrl

    where to buy stromectol - stromectol cost ivermectin otc

  113. Henrybrura

    gay dating atlanta ga
    dating a southern gay man
    [url="http://gayedating.com/?"]dating sim gay[/url]

  114. Rlitvs

    order prednisone 40mg - prednisone 10mg price in india 20 mg of prednisone

  115. sefeanaps
  116. Rvgzai

    buy furosemide 40 mg uk - clomiphene for men lasix 40 mg price in india

  117. Henrybrura

    free local gay sex dating
    top gay dating games
    [url="http://gaydatingcanada.com/?"]gay dating mobile[/url]

  118. Henrybrura

    gay dating sites iphone
    gay dating sierra vista
    [url="http://datinggayservices.com/?"]gay arab dating[/url]

  119. Henrybrura

    100 free online gay dating
    mature gay male dating sites
    [url="http://gaydatinglosangeles.com/?"]speed dating dc gay[/url]

  120. Axiotolal
  121. Zithromax

    food effect on cialis

  122. Qdwmci

    ventolin generic price - ventolin cost uk cost of ventolin in usa

  123. priligy dapoxetine buy

    Cheap Ed Trial Packs

  124. Henrybrura

    gay japan dating site
    tami gay dating
    [url="http://gaydatingcanada.com/?"]gay latino dating[/url]

  125. Sgrsfq

    over the counter cytotec - how to get cytotec online buy generic cytotec

  126. icolladia
  127. Gkqsbq

    order doxycycline canada - purchase doxycycline prednisolone pack

  128. twilsOm
  129. Baimame

    http://buypriligyhop.com/ - priligy medicine

  130. CoahPhoda
  131. Pmjltu

    order stromectol - ivermectin gel stromectol 6mg online

  132. Lasix

    bangkok cialis

  133. takipçi satın al

  134. FrauffLup
  135. Plaquenil

    Cialis Traitement Continu

  136. FrauffLup
  137. icolladia
  138. lasix over the counter

    Clomid Acide Folique Je

  139. buy zithromax

    Cheapeast direct isotretinoin order in internet

  140. Nqmbtf

    purchase tadalafil - tadalafil 10mg cheap tadalafil

  141. CoahPhoda
  142. Plaquenil

    puedo tomar viagra todos los dias

  143. Wjskjx

    accutane 10mg - accutane 60 mg buy accutane online cheap canada

  144. Baimame
  145. Priligy

    Lioresal Achat En Canada

  146. twilsOm
  147. suepext
  148. Ppvrom

    academicwriting - eassy help academic writing support

  149. Zithromax

    que es cialis y viagra

  150. Kgvsso

    stromectol pill price - buy stromectol online stromectol 3 mg tablet price

Comment

Your email address will not be disclosed. The required fields are marked with*.

Related recommendation

No related articles!

微信扫一扫,分享到朋友圈

Username and Password Leaves Over 100,000 Zyxel Firewalls and VPN Gateways Vulnerable to Serious Attacks