CVE-2020-29583criticalunder attackCWE-522

CVE-2020-29583

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 90%
from disclosure to weapon13 days
Published on NVDDec 22
1st PoC+13d
CISA KEV+316d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

Zyxel USG firewalls have a hidden admin account (zyfwp) with a fixed password that's exposed in the firmware. An attacker can use this to gain full control of the device without needing to guess or crack anything.

Technical detail

CVE-2020-29583 involves a hardcoded, undocumented administrative account in Zyxel USG firmware 4.60 with credentials stored in cleartext within the firmware image. An attacker with access to the firmware or network can authenticate via SSH or web interface with administrative privileges, bypassing normal access controls.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web interface with admin privileges.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.