Evil-DB LogoEvil-DB
← All CVEs

CVE-2020-29583

critical · 9.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2021-11-03Remediation due 2022-05-03

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web interface with admin privileges.

9.8
CVSS
90.2%
EPSS (exploit prob.)
100th
EPSS percentile
2020-12-22
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-522

Affected products

VendorProductAffected versions
zyxelusg20-vpn_firmware4.60
zyxelusg20-vpnall versions
zyxelusg20w-vpn_firmware4.60
zyxelusg20w-vpnall versions
zyxelusg40_firmware4.60
zyxelusg40all versions
zyxelusg40w_firmware4.60
zyxelusg40wall versions
zyxelusg60_firmware4.60
zyxelusg60all versions
zyxelusg60w_firmware4.60
zyxelusg60wall versions
zyxelusg110_firmware4.60
zyxelusg110all versions
zyxelusg210_firmware4.60
zyxelusg210all versions
zyxelusg310_firmware4.60
zyxelusg310all versions
zyxelusg1100_firmware4.60
zyxelusg1100all versions
zyxelusg1900_firmware4.60
zyxelusg1900all versions
zyxelusg2200_firmware4.60
zyxelusg2200all versions
zyxelzywall110_firmware4.60
zyxelzywall110all versions
zyxelzywall310_firmware4.60
zyxelzywall310all versions
zyxelzywall1100_firmware4.60
zyxelzywall1100all versions
zyxelatp100_firmware4.60
zyxelatp100all versions
zyxelatp100w_firmware4.60
zyxelatp100wall versions
zyxelatp200_firmware4.60
zyxelatp200all versions
zyxelatp500_firmware4.60
zyxelatp500all versions
zyxelatp700_firmware4.60
zyxelatp700all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-29583