ZLD4.73 & ZLD5.36 patch 2 Official Version Released to address Buffer Overflow Issues

MarekSK · May 2023

https://community.zyxel.com/en/discussion/comment/52764#Comment_52764

But this is older model - only USG 20, no VPN in name. Is it a same model?

ESupport · May 2023

https://community.zyxel.com/en/discussion/comment/52767#Comment_52767

The 20 is no longer supported. They quitly replaced it with the 20-VPN which is a complete different device. We are also still have some of these boxes because in the time the 40 or 60 where to expensive. Looks like in term of support we got the short end of the stick.

jonatan · May 2023

@ESupport

USG40/60 runs on v.4xx firmware, and USG 20 on 3.xx

EOL Legacy devices (3.30) are not affected

MarekSK · May 2023

https://community.zyxel.com/en/discussion/comment/52770#Comment_52770

That would be good news.

Can you please confirm from Zyxel, that the old model USG 20 is not affected?

ESupport · May 2023

https://community.zyxel.com/en/discussion/comment/52770#Comment_52770

You are right, i just checked.

GIOMIND · May 2023

A linkedin post (see below) says it was possibile to get root access via these exploits.
If this is the case, it is easy to steal the config file and decript the passwords in there (there is a tool on the net to do that), including admin one.

I strongly suggest to change all passwords.

GIOMIND · May 2023

https://www.linkedin.com/posts/425a_zyxel-zyxel-vulnerabilitymanagement-ugcPost-7067040279790256128-COHr?utm_source=share&utm_medium=member_android

RSaull · May 2023

https://community.zyxel.com/en/discussion/comment/52803#Comment_52803

That post is a bit misleading. It's referencing the CVE from April.

Boiler1976 · May 2023

Greetings…..would someone be able to advice me on which firmware to use for my zywall 110 to adress these vpn issues? is the version 4.73 the one that fixes this even for my older 110? thanks a lot for any help!