CVE-2020-29583
ZY
Zyxel Multiple Products
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
What it is
Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability in an undocumented account ("zyfwp") with an unchangeable password.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Zyxel entries on the list
- GS1900 Series Switches Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability CVE-2026-7273 · Sep 21, 2026
- DSL CPE Devices Zyxel DSL CPE OS Command Injection Vulnerability CVE-2024-40891 · Feb 11, 2025
- DSL CPE Devices Zyxel DSL CPE OS Command Injection Vulnerability CVE-2024-40890 · Feb 11, 2025
- Multiple Firewalls Zyxel Multiple Firewalls Path Traversal Vulnerability CVE-2024-11667 · Dec 3, 2024
- EMG2926 Routers Zyxel EMG2926 Routers Command Injection Vulnerability CVE-2017-6884 · Sep 18, 2023
- P660HN-T1A Routers Zyxel P660HN-T1A Routers Command Injection Vulnerability CVE-2017-18368 · Aug 7, 2023