Researchers have discovered a hardcoded admin-level backddoor on Zyxel firewalls, access point controllers and and VPN gateways.
The recommendation is for an immediate update to the system. Patches are available for the ATP, USG, USG Flex, and VPN series. Patches for the NXC series is expected in April 2021.
Products included are:-
the Advanced Threat Protection (ATP) series - used primarily as a firewall
the Unified Security Gateway (USG) series - used as a hybrid firewall and VPN gateway
the USG FLEX series - used as a hybrid firewall and VPN gateway
the VPN series - used as a VPN gateway
the NXC series - used as a WLAN access point controller
[zdnet.com...]
[zyxel.com...]
