Vulnerability CVE-2020-29583

kyssling

Hi, anybody can me explain please if FirmWare  V4.60(AAPH.0)ITS-WK48-r97191 is protect for that vulnerability ?

Thanks Vaclav

USG_User

I've updated to official 4.60(AAPH.1). It solves it.

No idea about ITS WK48

kyssling

Dream ...

https://support.zyxel.eu/hc/en-us/articles/360000636480-Release-Notes-for-Weekly-Support-Version here is comment for WK48:

[BUG FIX][CVE-2020-29583]

a. Vulnerability fix for undocumented user account.

but here

https://businessforum.zyxel.com/discussion/5318/zyxel-security-advisory-for-hardcoded-credential-vulnerability#latest

4.60 is affected

USG_User

But only 4.60(AAPH.0) is affected, AAPH.1 contains the fix.

Zyxel_Jeff

Hi @kyssling,

It’s our suggestion that you may consider to upgrade your device firmware to V4.60(AAPH.1) patch1 FW.

And you can refer to the following link about CVE-2020-29583:https://businessforum.zyxel.com/discussion/5400/what-you-should-know-about-cve-2020-29583-and-actions-to-take-to-mitigate-the-risk#latest