Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web interface with admin privileges.
Connections 61
has cited scope1 retained · stored CVE-2020-29583 → n/a · n/aef2a419f-9440-4a8b-a4e6-72f3d589f11e
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · zywall31043a8e0e8-5ddb-47b7-9a6c-7816efa2e3c4
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg20-vpn96d0797d-c9cf-41a8-86d3-b1348d17d965
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · vpn10023fa8da2-74cb-40ef-9ac0-a45b482bcf1e
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · atp100620f7fe7-2676-4443-98a1-efb77b518d1a
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg_flex_20070b44037-ae1c-4a04-b5e9-a569551fa042
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg40474f8f54-5bc5-4e04-b751-9b8a995d65ec
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · atp20019a9f3d5-8f06-4b05-a965-89272d6b0de6
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg31023d9b50a-69f9-43d0-989c-2a557b84ad65
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · atp5007ea11d89-6942-47a0-9a58-864da1748e56
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · atp800087e155f-0bc2-48e5-85fa-a8e17e4236e2
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg21079392b25-c6b8-4538-b776-e24bde60bd47
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg20w-vpn835817b2-5b6b-41ce-a2c0-1339827f49d8
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg1100956d8ede-2221-4bb6-ba7b-9e59bb5e8d55
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · vpn300141b5c6b-32f0-4b9e-b99e-473464cea5eb
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg60d6ebe184-e3dd-444f-b53c-7eb094f346cb
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg2200e1d2b3f6-2ce5-4ebd-953a-3994d18b0b21
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg60wd4a3d0d5-823b-46a0-9dba-bc6f43c5fa45
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · zywall1103a871f17-365e-4831-b79c-a0abe78e626c
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg_flex_100c6533d8d-3696-414d-9094-1fc23efca698
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg11023132c67-3575-466a-90b5-90762219e141
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg19005adfb42c-c395-478c-92b9-c629d937fd88
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg_flex_50007ddd0db-96e0-4f54-ae76-d552e9a01d4f
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · zywall11002436e484-d25a-4dc2-9e83-c9bb5d31cfc0
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · vpn1000704cd205-d276-4084-a2b5-324797290f98
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · atp7004815f959-400a-4a15-a07f-6e2e8cbdcef9
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · vpn50e2f7be4b-d69c-446d-a531-46ffcd7ab7bd
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg_flex_100w5434b7ea-958b-4b31-b591-c28bf497ae0a
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · atp100wd8f7ec16-79ff-4452-9888-b80c8a9d31cf
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg40w4a237672-c908-48bd-a5bf-7fdcc8c05cbf
has environmental constraint1 retained · stored CVE-2020-29583 → zyxel · usg_flex_700357db219-f900-488e-b889-9e4537149a76
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg_flex_200_firmwaref95ba53a-b744-4947-a11b-76f01e24311f
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg_flex_500_firmware7d7119b9-5c11-4792-a6d6-e53c5750995f
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg60w_firmware725dabd6-db2d-4424-9667-b4582369f039
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg310_firmware1856f778-61de-4e35-8fb0-f89075aa3c51
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · vpn1000_firmwaree1b2f491-e9eb-482d-9d26-6f4e2f1b578d
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · zywall110_firmwaref3554ef3-2d8c-49ed-8ffd-dc282c33f5fa
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · zywall310_firmwarea0c585bf-bc07-470f-a33f-11849f43bed5
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg110_firmware4f3cad08-ee33-4363-a38f-9a536763c4f2
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · atp500_firmware84b4fb8d-3788-4efc-9156-a0417a3d6e35
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg_flex_100w_firmware149e8801-004f-462a-ac5e-1090310c0078
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · vpn100_firmwareb5e39a25-b010-4d78-a09e-a21808d0c6af
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · atp100w_firmware3f3ce6cf-f374-4de9-bf64-eece37e92920
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · vpn300_firmware651a13c5-1949-43e5-80ad-2805280a8beb
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg60_firmwaref032eca6-4c21-415b-b444-219f764dd9b0
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg210_firmware95d34abb-87c1-4d73-a772-186d9474d9ea
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg40_firmwarebfab753b-ad6f-402d-acb8-099e333a013e
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · atp100_firmware56fc4fac-acc1-4ae5-af19-e6bf4cd0f0d7
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg1100_firmware02e56e22-ff04-42c2-9931-07cec086abb9
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg40w_firmwarec04eb302-8ab8-4c30-8db6-35bbc4e97c30
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · atp800_firmware77247a58-cce2-4366-a7ea-85a1f99db634
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg2200_firmware11e9bc51-fbb5-491c-a0d6-010df2418e92
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg1900_firmware2d76360d-d690-494d-8aa4-fde16f6b3e39
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · atp200_firmwared5a929cd-7e15-4b11-933d-82631df30496
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · vpn50_firmware60a16672-963e-4b10-a91c-6e3df349ad72
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg_flex_700_firmware53ee8851-e817-41c7-b2de-95eb3e956724
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg_flex_100_firmware99e9209a-6343-4a0f-8f9d-d74044f05392
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg20-vpn_firmware19abcb8e-a40c-43ae-9b8e-18a91ee6d472
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · atp700_firmwarea881654b-8956-467a-9f2b-28a301bdd0b2
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · usg20w-vpn_firmware1fccabcf-263e-44f4-b60d-ff8c83bbc06f
has vulnerable target scope1 retained · stored CVE-2020-29583 → zyxel · zywall1100_firmware26c3d8bd-b51f-4e9e-a473-358ba5ef9d8d