Backdoor account discovered in more than 100,000 Zyxel firewalls, VPN gateways

Started by icecream-guy, January 04, 2021, 08:13:17 AM

Previous topic - Next topic
Print
Go Down Pages1
User actions

icecream-guy

January 04, 2021, 08:13:17 AM
https://www.zdnet.com/article/backdoor-account-discovered-in-more-than-100000-zyxel-firewalls-vpn-gateways/

More than 100,000 Zyxel firewalls, VPN gateways, and access point controllers contain a hardcoded admin-level backdoor account that can grant attackers root access to devices via either the SSH interface or the web administration panel.
:professorcat:

My Moral Fibers have been cut.

deanwebb

#1
January 04, 2021, 10:13:21 AM
Just what we ALL needed, another hardcoded admin account...
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

Dieselboy

#2
January 04, 2021, 09:17:28 PM
Hahaha funny joke, Zyxel!  :eek:

... Cue the shodan searches to find them.

icecream-guy

#3
January 05, 2021, 03:33:12 PM
Quote from: Dieselboy on January 04, 2021, 09:17:28 PM
Hahaha funny joke, Zyxel!  :eek:

... Cue the shodan searches to find them.

They already posted the u/p in the sub heading in the article
:professorcat:

My Moral Fibers have been cut.

wintermute000

#4
January 06, 2021, 03:54:04 AM
I just assume its all internet of shit unless its a properly configured enterprise-grade FW and even then they have their zero-days like everyone else

deanwebb

#5
January 06, 2021, 01:58:17 PM
The "S" in "IoT" stands for "Security". :smug:
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.
Print
Go Up Pages1
User actions