CVE-2020-29583-Zyxel security advisory for hardcoded credential vulnerability
Zyxel has released a patch for the hardcoded credential vulnerability of firewalls and AP controllers recently reported by researchers from Eye Control Netherlands. Users are advised to install the applicable firmware updates for optimal protection.
A hardcoded credential vulnerability was identified in the “zyfwp” user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP.
As the zyfwp user has admin privileges, an attacker could completely compromise the confidentiality, integrity and availability of the device.
Full list available on below URL:
Should update to the latest firmware as per vendor advisory.
PetitPotam: Microsoft Windows Server NTLM Relay Attacks on Active Directory Certificate Services (AD CS)
26 Jul 2021 - Security Advisories & Alerts
25 Jul 2021 - Security Advisories & Alerts