Known Exploited Vulnerabilities November 03, 2021 · CISA KEV Catalog

CVE-2020-29583: Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability

Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability in an undocumented account ("zyfwp") with an unchangeable password.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-29583 Zyxel
Related: CVE-2026-7273: Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Sep 21, 2026
CVE-2024-40890: Zyxel DSL CPE OS Command Injection Vulnerability Known Exploited Vulnerabilities · Feb 11, 2025
CVE-2024-40891: Zyxel DSL CPE OS Command Injection Vulnerability Known Exploited Vulnerabilities · Feb 11, 2025