Zyxel Ditches Patches: Users Urged to Ditch Ancient Routers Vulnerable to Exploits!
Zyxel warns users of its outdated CPE Series devices about two actively exploited security flaws. With no plans for patches, the company urges users to switch to supported models. Over 1,500 devices are exposed online, creating a juicy target for hackers. Time to upgrade before “1234” becomes your favorite hacker’s new password!
Hot Take:
Who needs outdated routers when you can have a security sieve instead? Zyxel may not be a fan of patching old gadgets, but they sure know how to keep things interesting for hackers worldwide. Looks like it’s time to upgrade, or get ready for an unwelcome party in your network!
Key Points:
- VulnCheck uncovered two major vulnerabilities in Zyxel CPE Series devices, exploited since July 2024.
- Over 1,500 vulnerable devices are exposed to the internet, according to network scanners FOFA and Censys.
- Zyxel advises replacing the affected end-of-life (EoL) models instead of patching them.
- Two vulnerabilities involve telnet command injection and weak default credentials.
- Zyxel adds a third flaw in their advisory, mirroring the telnet command injection issue.
Already a member? Log in here