Zyxel – Cyber Security Review

Zyxel urges customers to patch critical firewall bypass vulnerability

Posted onApril 1, 2022April 3, 2022

Zyxel is urging customers to immediately patch a critical vulnerability in the vendor’s firewall software. In a security advisory published this week, the Taiwanese networking giant said the security flaw can lead to the circumvention of firewall protection in Zyxel Read More …

Backdoor account discovered in more than 100,000 Zyxel firewalls, VPN gateways

Posted onJanuary 2, 2021January 4, 2021

More than 100,000 Zyxel firewalls, VPN gateways, and access point controllers contain a hardcoded admin-level backdoor account that can grant attackers root access to devices via either the SSH interface or the web administration panel. The backdoor account, discovered by Read More …

Fast-Moving DDoS Botnet Exploits Unpatched ZyXel RCE Bug

Posted onApril 22, 2020April 23, 2020

A new variant of the Hoaxcalls botnet, which can be marshalled for large-scale distributed denial-of-service (DDoS) campaigns, is spreading via an unpatched vulnerability impacting the ZyXEL Cloud CNM SecuManager that was disclosed last month. That’s according to researchers at Radware, Read More …

New Mirai Variant Targets Zyxel Network-Attached Storage Devices

Posted onMarch 19, 2020March 23, 2020

As soon as the proof-of-concept (PoC) for CVE-2020-9054 was made publicly available last month, this vulnerability was promptly abused to infect vulnerable versions of Zyxel network-attached storage (NAS) devices with a new Mirai variant – Mukashi. Mukashi brute forces the logins using Read More …