Exploited Vulnerabilities DailyCVE-2020-29583: Zyxel Multiple Products
EPSS90.1%No. 462 of 1739 in KEV
CVE year2020~1 yrs before listing
Same vendor in KEV13
Same product1
| Field | Value |
|---|---|
| Vendor | Zyxel |
| Product | Multiple Products |
| Name | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability |
| Added to KEV | 2021-11-03 |
| US federal due date | 2022-05-03 |
| Ransomware use | Unknown |
| CWE | CWE-522 |
CISA description
Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability in an undocumented account ("zyfwp") with an unchangeable password.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Zyxel Multiple Products vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2021-11-03.