Issues with firmware on couple of USG Flex 200 and Zywall 100

Options
zpe
zpe Posts: 5
First Comment
in Security

Hi.
We are having issues with Flex 200 v 5.32(ABUI.0) and Zywall v 4.71(AAAA.0) !
the VPN service stoped working for the costumer , then wen we tryed to access the firewalls with the gui , they are unresponsive ! after a while we get: wrong Cli command device timeout… then we tryed to access withh ssh and there we are getting unable to connect zySH deamon ! What to do to get a fresh firmware in this stage ?

zyxel 4.71.PNG
zyxel 4.71_cli.PNG

«1

All Replies

  • PeterUK
    PeterUK Posts: 2,761  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    You need to update the firmware best to unplug from from WAN and reboot

  • zpe
    zpe Posts: 5
    First Comment
    Options

    Thanks PeterUK !

    Do you think its necessary to boot in debug mode or , just a reebot will do the trick ?

  • Zyxel_James
    Zyxel_James Posts: 618  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    edited June 2023
    Options

    @zpe I suggest you reboot the device first and try again. Please upgrade to v5.36Patch2 which fixes vulnerabilities and VPN connection issues.
    If the upgrade fails, please refer to this article.

    https://community.zyxel.com/en/discussion/17147/what-should-i-do-if-the-device-failed-to-be-upgraded-to-the-latest-firmware

  • zpe
    zpe Posts: 5
    First Comment
    Options

    Thanks , Zyxel_James we will try that !

  • zpe
    zpe Posts: 5
    First Comment
    Options

    Hello!

    Unfortunately, we're unable to upgrade the ZyWALL 110 device to version 4.73. We're considering downgrading it to version 4.6x. We've been unable to locate the file the downgrade. Could you please assist us in finding it?

  • PeterUK
    PeterUK Posts: 2,761  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited June 2023
    Options

    Why can't you upgrade? try V4.72 then 4.73

    https://support.zyxel.eu/hc/en-us/articles/360013941859-Security-Products-Firmware-Overview-FLEX-ATP-USG-VPN-ZYWALL-

    Downgrading has other vulnerabilities. 

  • zpe
    zpe Posts: 5
    First Comment
    Options

    We acctaully managed to upgrade one firewall , will se if its fully functional in couple of days…

  • AlexD911
    AlexD911 Posts: 2
    First Anniversary Friend Collector First Comment
    Options

    We have a USG 200, its also randomly (after 2 years) showing the same symptoms, after being up for ~ 60 - 90 seconds the router appears to lock up, it cannot be logged into - although it appears to be working correctly for a few hours until it starts totally locking up and dropping WAN to the network.

    Is this some kind of attack being aimed at Zyxel Routers?

    Performing a factory reset is really going to be problematic and the router does not stay responsive long enough to upgrade the firmware (even when set to automatically do it).

  • PeterUK
    PeterUK Posts: 2,761  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Unplug it from WAN then upgrade

  • AlexD911
    AlexD911 Posts: 2
    First Anniversary Friend Collector First Comment
    Options
    https://community.zyxel.com/en/discussion/comment/53333#Comment_53333

    Yes sure but why do you need to do that? Is this some kind of DoS problem?

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）