CVE-2020-29583 Scanner

The ZyXEL Unified Security Gateway (USG) series is a popular network security appliance used by small and medium-sized businesses to provide firewall, VPN, and intrusion detection capabilities. These devices are critical for protecting internal networks from external threats, making their security essential for business operations and data integrity.

CVE-2020-29583 is a critical vulnerability that arises from hard-coded credentials embedded in the firmware of ZyXEL USG devices running version 4.60. This flaw allows attackers to bypass authentication mechanisms and gain unauthorized access to the device. The credentials are static and cannot be changed by administrators, making them a persistent security risk.

Specifically, the vulnerability resides in the SSH service of the ZyXEL USG, where a hard-coded username and password are present. Attackers can use these credentials to log in remotely with root privileges, bypassing standard authentication controls. The affected endpoint is the SSH interface, which is typically exposed to the network for management purposes.

If exploited, an attacker can gain full administrative control over the device, allowing them to intercept network traffic, modify firewall rules, deploy malware, or pivot to other systems within the network. This could lead to data breaches, network compromise, and significant operational disruption, highlighting the severity of the vulnerability with a CVSS score of 9.8.