Discover and read the best of Twitter Threads about #zyxel
Most recents (1)
#Zyxel announced CVE-2020-29583 fixing a backdoor admin account which gave attackers root on affected devices via SSH or web interface
If you want to examine the firmware you need to run a #known_plaintext_attack against an encrypted zip
Sounds hard; don't worry I got you... đ
If you want to examine the firmware you need to run a #known_plaintext_attack against an encrypted zip
Sounds hard; don't worry I got you... đ
Zyxel have actually removed the backdoored firmware versions from their portal; but you can still grab the latest version or earlier versions for further inspection.
Example:
portal.myzyxel.com/my/firmwares?fâŠ
Example:
portal.myzyxel.com/my/firmwares?fâŠ
Now, unzip the contents and you should have something like this
