iopwood.blogg.se - Ftp zyxel firmware

#FTP ZYXEL FIRMWARE PATCH#
#FTP ZYXEL FIRMWARE UPGRADE#
#FTP ZYXEL FIRMWARE PASSWORD#

#FTP ZYXEL FIRMWARE PATCH#

Zyxel NWA1123-AC PRO 5.50 patch 0 and earlier.

Zyxel NWA1123-AC HD 5.50 patch 0 and earlier.

Zyxel NWA1123-ACv2 5.50 patch 0 and earlier.

Zyxel NWA1302-AC 5.50 patch 0 and earlier.

Zyxel NWA5301-NJ 5.50 patch 0 and earlier.

Zyxel NWA5123-NI 5.50 patch 0 and earlier.

Zyxel NWA5123-AC HD 5.50 patch 0 and earlier.

Zyxel NWA5123-AC 5.50 patch 0 and earlier.

Zyxel WAC5302D-S 5.50 patch 0 and earlier.

Zyxel WAC6552D-S 5.50 patch 0 and earlier.

Zyxel WAC6553D-E 5.50 patch 0 and earlier.

Zyxel WAC6503D-S 5.50 patch 0 and earlier.

Zyxel WAC6502D-S 5.50 patch 0 and earlier.

Zyxel WAC6502D-E 5.50 patch 0 and earlier.

Zyxel WAC6303D-S 5.50 patch 0 and earlier.

Zyxel WAC6103D-I 5.50 patch 0 and earlier.

The vendor provided the following list of affected devices:

Zyxel NWA5121-N 5.50 patch 0 and earlier.

Zyxel NWA5121-NI 5.50 patch 0 and earlier.

The following versions have been manually tested and were automatically verified with IoT Inspector: The directory “conf” contains all configuration files which store the WiFi SSIDs and passphrases. $ ls cert conf debug idp packet_trace script tmp wtp_image The content of the FTP server looks like the following listing:

#FTP ZYXEL FIRMWARE PASSWORD#

The username “devicehaecived” and the password “1234” can be used to access the FTP server of the AP on port 21. Proof Of Concept 1) Hardcoded FTP Credentials The credentials were found by doing an automated scan with IoT Inspector.

When the WiFi network is bound to another VLAN, an attacker can cross the network by fetching the credentials from the FTP server. This FTP server can be accessed with hardcoded credentials that are embedded in the firmware of the AP. Vulnerability Overview/Description 1) Hardcoded FTP CredentialsĪn FTP service runs on the Zyxel wireless access point that contains the configuration file for the WiFi network. A thorough security review should be performed by security professionals to identify further potential security issues.

#FTP ZYXEL FIRMWARE UPGRADE#

SEC Consult recommends Zyxel customers to upgrade the firmware to the latest version available. Loyal friend, powerful ally, reliable resource - we are Zyxel, Your Networking Ally.” We stand side-by-side with our customers and partners to share new approaches to networking that will unleash their abilities. We’re building the networks of tomorrow, helping unlock the world’s potential and meeting the needs of the modern workplace powering people at work, life and play. Our ability to adapt and innovate with networking technology places us at the forefront of understanding connectivity for telco/service providers, businesses and home users. This spirit has never been changed since we developed the world’s first integrated 3-in-1 data/fax/voice modem in 1992. We keep promoting creativity which meets the needs of customers. has been connecting people to the internet for nearly 30 years. “Focused on innovation and customer-centricity, Zyxel Communications Corp.