SSH Security Enhancements in Zyxel APs (Firmware 7.10)

Zyxel_Claudia

Zyxel’s firmware 7.10 update introduces important security upgrades to SSH management, ensuring stronger encryption and better compliance with modern security standards.

1. Upgraded SSH Package for Stronger Security

The SSH package used by Zyxel APs has been updated to address known security issues. These updates ensure:

• Stronger encryption to protect SSH sessions.
• No longer support older SSH algorithms, such as SSH-RSA.
• User should upgrade SSH client utilities to avoid using outdated algorithm. (For example: Putty – v0.81 or TeraTerm – v5.3)

2. Mandatory Password Change for CLI Users

Previously, when logging in to the web GUI for the first time, Zyxel APs forced administrators to change the default password. However, CLI (SSH) users were not required to do so—they could continue using the default password "1234" indefinitely.

What’s New in Firmware 7.10?

Force changing default password when log in with SSH connection and consoleupon first login.