You received this notification because of the recently reported vulnerability involving Zyxel Firewalls and AP Controllers.
What caused this vulnerability?
A hardcoded credential that had root access was found to be easily discoverable. The username and password were visible in one of Zyxel Firmware binaries, making the following affected products susceptible to backdoor attacks:
What are the possible risks?
The exposed credentials can be used as a backdoor by threat actors to access vulnerable devices, launch network attacks, and other malicious activities on the affected devices.
How to protect yourself from this vulnerability?
Zyxel has released a patch for the hardcoded credential vulnerability of firewalls and AP controllers. Users are advised to install the applicable firmware updates for optimal protection. Affected users can contact the Zyxel Support Team should they require further assistance.
