Issues with firmware on couple of USG Flex 200 and Zywall 100

zpe
zpe Posts: 5
First Comment
in Security

Hi.
We are having issues with Flex 200 v 5.32(ABUI.0) and Zywall v 4.71(AAAA.0) !
the VPN service stoped working for the costumer , then wen we tryed to access the firewalls with the gui , they are unresponsive ! after a while we get: wrong Cli command device timeout… then we tryed to access withh ssh and there we are getting unable to connect zySH deamon ! What to do to get a fresh firmware in this stage ?

zyxel 4.71.PNG
zyxel 4.71_cli.PNG

«1

All Replies

  • PeterUK
    PeterUK Posts: 3,577  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    You need to update the firmware best to unplug from from WAN and reboot

  • zpe
    zpe Posts: 5
    First Comment

    Thanks PeterUK !

    Do you think its necessary to boot in debug mode or , just a reebot will do the trick ?

  • Zyxel_James
    Zyxel_James Posts: 663  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers
    edited June 2023

    @zpe I suggest you reboot the device first and try again. Please upgrade to v5.36Patch2 which fixes vulnerabilities and VPN connection issues.
    If the upgrade fails, please refer to this article.

    https://community.zyxel.com/en/discussion/17147/what-should-i-do-if-the-device-failed-to-be-upgraded-to-the-latest-firmware

  • zpe
    zpe Posts: 5
    First Comment

    Thanks , Zyxel_James we will try that !

  • zpe
    zpe Posts: 5
    First Comment

    Hello!

    Unfortunately, we're unable to upgrade the ZyWALL 110 device to version 4.73. We're considering downgrading it to version 4.6x. We've been unable to locate the file the downgrade. Could you please assist us in finding it?

  • PeterUK
    PeterUK Posts: 3,577  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited June 2023

    Why can't you upgrade? try V4.72 then 4.73

    https://support.zyxel.eu/hc/en-us/articles/360013941859-Security-Products-Firmware-Overview-FLEX-ATP-USG-VPN-ZYWALL-

    Downgrading has other vulnerabilities. 

  • zpe
    zpe Posts: 5
    First Comment

    We acctaully managed to upgrade one firewall , will se if its fully functional in couple of days…

  • AlexD911
    AlexD911 Posts: 2
    First Comment Friend Collector First Anniversary

    We have a USG 200, its also randomly (after 2 years) showing the same symptoms, after being up for ~ 60 - 90 seconds the router appears to lock up, it cannot be logged into - although it appears to be working correctly for a few hours until it starts totally locking up and dropping WAN to the network.

    Is this some kind of attack being aimed at Zyxel Routers?

    Performing a factory reset is really going to be problematic and the router does not stay responsive long enough to upgrade the firmware (even when set to automatically do it).

  • PeterUK
    PeterUK Posts: 3,577  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    Unplug it from WAN then upgrade

  • AlexD911
    AlexD911 Posts: 2
    First Comment Friend Collector First Anniversary
    https://community.zyxel.com/en/discussion/comment/53333#Comment_53333

    Yes sure but why do you need to do that? Is this some kind of DoS problem?

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）