Usg1900 Firmware vulnerabilities

2 known vulnerabilities in Usg1900 Firmware from Zyxel. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Zyxel Multiple Products Use of Hard-Coded Credentials Exploited

  CVE-2020-29583Dec 22, 2020ZyxelEPSS 90%

  Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web in

• 9.8 Critical severity

  Zyxel Multiple NAS Devices OS Command Injection Exploited

  CVE-2020-9054Mar 4, 2020ZyxelEPSS 100%

  Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS dev