← CVE Radar
CVE-2020-29583Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web interface with admin privileges.
9.8 CRITICALEPSS 90.15%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 10.0 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due May 3, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2020-29583
- Status
- Analyzed
- Assigner (CNA)
- mitre
- Published
- Dec 22, 2020
- Last modified
- 2026-06-17 03:11 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
zyxelusg20-vpn firmware1 version range
- 4.60
zyxelusg20w-vpn firmware1 version range
- 4.60
zyxelusg40 firmware1 version range
- 4.60
zyxelusg40w firmware1 version range
- 4.60
zyxelusg60 firmware1 version range
- 4.60
zyxelusg60w firmware1 version range
- 4.60
zyxelusg110 firmware1 version range
- 4.60
zyxelusg210 firmware1 version range
- 4.60
zyxelusg310 firmware1 version range
- 4.60
zyxelusg1100 firmware1 version range
- 4.60
zyxelusg1900 firmware1 version range
- 4.60
zyxelusg2200 firmware1 version range
- 4.60
zyxelzywall110 firmware1 version range
- 4.60
zyxelzywall310 firmware1 version range
- 4.60
zyxelzywall1100 firmware1 version range
- 4.60
zyxelatp100 firmware1 version range
- 4.60
zyxelatp100w firmware1 version range
- 4.60
zyxelatp200 firmware1 version range
- 4.60
zyxelatp500 firmware1 version range
- 4.60
zyxelatp700 firmware1 version range
- 4.60
zyxelatp800 firmware1 version range
- 4.60
zyxelvpn50 firmware1 version range
- 4.60
zyxelvpn100 firmware1 version range
- 4.60
zyxelvpn300 firmware1 version range
- 4.60
zyxelvpn1000 firmware1 version range
- 4.60
zyxelusg flex 100 firmware1 version range
- 4.60
zyxelusg flex 100w firmware1 version range
- 4.60
zyxelusg flex 200 firmware1 version range
- 4.60
zyxelusg flex 500 firmware1 version range
- 4.60
zyxelusg flex 700 firmware1 version range
- 4.60
References
- ftp.zyxel.com http://ftp.zyxel.com/USG40/firmware/USG40_4.60%28AALA.1%29C0_2.pdf
- businessforum.zyxel.com https://businessforum.zyxel.com/discussion/5252/zld-v4-60-revoke-and-wk48-firmware-release
- businessforum.zyxel.com https://businessforum.zyxel.com/discussion/5254/whats-new-for-zld4-60-patch-1-available-on-dec-15
- eyecontrol.nl https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html
- secpod.com https://www.secpod.com/blog/a-secret-zyxel-firewall-and-ap-controllers-could-allow-for-administrative-access-cve-2020-29583/
- zyxel.com https://www.zyxel.com/support/CVE-2020-29583.shtml
- zyxel.com https://www.zyxel.com/support/security_advisories.shtml
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-29583