Backdoor account discovered in more than 100k Zyxel firewalls, VPN gateways

Patches are currently available only for the ATP, USG, USG Flex, and VPN series. Patches for the NXC series are expected in April 2021, according to a Zyxel security advisory.

4 months to deliver a security patch of this significance? Would love to know what kind of situation leads to that kind of latency.

usrnm• 6 years ago

They had to figure out what backdoor to replace it with

tapper• 6 years ago

This is why I use OpenWrt in my network!

vmception• 6 years ago

Its okay, they all had nothing to hide

cbozeman• 6 years ago

Its almost as if Chinese companies are either just arms of the state, or thoroughly infiltrated by state actors! I don't think US-based hardware manufacturers are really any better though.

To me this just illustrates the need for fully open-sourced hardware and software with domestic production facilities.

manuelabeledo3• 6 years ago

Zyxel is Taiwanese.

Also, this is more likely a case of incompetence, not maliciousness.

Bancakes• 6 years ago

Incompetence is a form of malice in cases like this.

coolgod2• 6 years ago

How do you know Taiwan doesn't have malicious state actors behind these backdoors? Is it because they aren't in a China ruled by the evil CCP?

Backdoor account discovered in more than 100k Zyxel firewalls, VPN gateways

Related Stories