CVE-2020-29583: Zyxel Multiple Products Use of Hard-Coded Credentials
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability. Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability in an undocumented account ("zyfwp") with an unchangeable password.
- CISA KEV-listed (remediation due 2022-05-03)
- EPSS 94.3% (99.9% percentile)