CVE-2020-29583

Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web interface with admin privileges.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

90.16% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2021-11-03

Nuclei

critical · CWE-522

Published

2020-12-22

Updated

2025-10-21

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29583.yaml

Exploit collections (1)

• Zyxel USG Series 账户硬编码漏洞（CVE-2020-29583）.mdtzwlhack/Vulnerability

Security advisories

• https://www.zyxel.com/support/CVE-2020-29583.shtml
• https://www.zyxel.com/support/security_advisories.shtml
• https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html
• https://www.secpod.com/blog/a-secret-zyxel-firewall-and-ap-controllers-could-allow-for-ad…
• https://businessforum.zyxel.com/discussion/5252/zld-v4-60-revoke-and-wk48-firmware-release
• https://businessforum.zyxel.com/discussion/5254/whats-new-for-zld4-60-patch-1-available-o…

References

• CVE Record
• NVD entry