H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2020-29583

Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability in an undocumented account ("zyfwp") with an unchangeable password.

Vulnerability
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03

Confidence

—

Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability in an undocumented account ("zyfwp") with an unchangeable password.

Labels

exploitedkev

CISA KEV context

Vendor / productZyxel Multiple Products
Added2021-11-03
Due date2022-05-03
14 recorded

Relationships

mitigates
from Remediate CVE-2020-29583
Mitigation
related-to
to Credential Stuffing
Technique
related-to
to Kerberoasting
Technique
related-to
to Modify Existing Service
Technique
related-to
to Password Recovery Exploitation
Technique
related-to
to Remote Services with Stolen Credentials
Technique
related-to
to Session Sidejacking
Technique
related-to
to Signature Spoofing by Key Theft
Technique
related-to
to Use of Captured Hashes (Pass The Hash)
Technique
related-to
to Use of Captured Tickets (Pass The Ticket)
Technique
related-to
to Use of Known Domain Credentials
Technique
related-to
to Use of Known Kerberos Credentials
Technique
related-to
to Use of Known Operating System Credentials
Technique
related-to
to Windows Admin Shares with Stolen Credentials
Technique
2 external

References

nvd
CVE-2020-29583
open
cwe
CWE-522
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance