Backdoor account discovered in more than 100k Zyxel firewalls, VPN gateways (opens in new tab)

(zdnet.com)

143 pointsraptor1115y ago17 comments

17 comments

> Patches are currently available only for the ATP, USG, USG Flex, and VPN series. Patches for the NXC series are expected in April 2021, according to a Zyxel security advisory.

4 months to deliver a security patch of this significance? Would love to know what kind of situation leads to that kind of latency.

usrnm5y ago

They had to figure out what backdoor to replace it with

chrisbolt5y ago

https://news.ycombinator.com/item?id=25539876

anakaine5y ago

This and a little looking on Shodan makes for a scary tale of negligence at scale.

RhodesianHunter5y ago

You just described the entire industry

based25y ago

https://www.reddit.com/r/sysadmin/comments/kotu67/zyxel_back...

https://en.wikipedia.org/wiki/Zyxel

sloshnmosh5y ago

This reminds me of the guy that discovered a backdoor in his router after he forgot the admin password over the Christmas holidays.

https://github.com/elvanderb/TCP-32764

There is helpful hints in that research that enabled me to view the firmware of my own router

cbozeman5y ago

Its almost as if Chinese companies are either just arms of the state, or thoroughly infiltrated by state actors! I don't think US-based hardware manufacturers are really any better though.

To me this just illustrates the need for fully open-sourced hardware and software with domestic production facilities.

manuelabeledo5y ago

Zyxel is Taiwanese.

Also, this is more likely a case of incompetence, not maliciousness.

coolgod5y ago

How do you know Taiwan doesn't have malicious state actors behind these backdoors? Is it because they aren't in a China ruled by the evil CCP?

2 more replies

Bancakes5y ago

Incompetence is a form of malice in cases like this.

1 more reply

vmception5y ago

Its okay, they all had nothing to hide

tapper5y ago

This is why I use OpenWrt in my network!

j / k navigate · click thread line to collapse