{
    "id": "CVE-2020-29583",
    "published": "2020-12-22 22:15:14",
    "last_modified": "2026-06-17 03:11:28",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-522",
    "description": "Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web interface with admin privileges.",
    "epss_score": "0.90155",
    "epss_percentile": "0.99795",
    "kev": 1,
    "kev_due": "2022-05-03",
    "has_exploit": 0,
    "updated_at": "2026-09-26 18:26:49",
    "priority": {
        "rank": 1,
        "label": "Patch first",
        "why": "On CISA KEV — known exploited in the wild, due 2022-05-03."
    },
    "products": [
        {
            "vendor": "zyxel",
            "product": "atp100"
        },
        {
            "vendor": "zyxel",
            "product": "atp100_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "atp100w"
        },
        {
            "vendor": "zyxel",
            "product": "atp100w_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "atp200"
        },
        {
            "vendor": "zyxel",
            "product": "atp200_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "atp500"
        },
        {
            "vendor": "zyxel",
            "product": "atp500_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "atp700"
        },
        {
            "vendor": "zyxel",
            "product": "atp700_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg110"
        },
        {
            "vendor": "zyxel",
            "product": "usg110_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg1100"
        },
        {
            "vendor": "zyxel",
            "product": "usg1100_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg1900"
        },
        {
            "vendor": "zyxel",
            "product": "usg1900_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg20-vpn"
        },
        {
            "vendor": "zyxel",
            "product": "usg20-vpn_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg20w-vpn"
        },
        {
            "vendor": "zyxel",
            "product": "usg20w-vpn_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg210"
        },
        {
            "vendor": "zyxel",
            "product": "usg210_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg2200"
        },
        {
            "vendor": "zyxel",
            "product": "usg2200_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg310"
        },
        {
            "vendor": "zyxel",
            "product": "usg310_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg40"
        },
        {
            "vendor": "zyxel",
            "product": "usg40_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg40w"
        },
        {
            "vendor": "zyxel",
            "product": "usg40w_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg60"
        },
        {
            "vendor": "zyxel",
            "product": "usg60_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg60w"
        },
        {
            "vendor": "zyxel",
            "product": "usg60w_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "zywall110"
        },
        {
            "vendor": "zyxel",
            "product": "zywall110_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "zywall1100"
        },
        {
            "vendor": "zyxel",
            "product": "zywall1100_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "zywall310"
        },
        {
            "vendor": "zyxel",
            "product": "zywall310_firmware"
        }
    ],
    "kev_detail": {
        "cve_id": "CVE-2020-29583",
        "date_added": "2021-11-03",
        "due_date": "2022-05-03",
        "vendor": "Zyxel",
        "product": "Multiple Products",
        "name": "Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability",
        "ransomware": 0
    },
    "exploits": [],
    "refs_list": [
        "http://ftp.zyxel.com/USG40/firmware/USG40_4.60%28AALA.1%29C0_2.pdf",
        "https://businessforum.zyxel.com/discussion/5252/zld-v4-60-revoke-and-wk48-firmware-release",
        "https://businessforum.zyxel.com/discussion/5254/whats-new-for-zld4-60-patch-1-available-on-dec-15",
        "https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html",
        "https://www.secpod.com/blog/a-secret-zyxel-firewall-and-ap-controllers-could-allow-for-administrative-access-cve-2020-29583/",
        "https://www.zyxel.com/support/CVE-2020-29583.shtml",
        "https://www.zyxel.com/support/security_advisories.shtml",
        "http://ftp.zyxel.com/USG40/firmware/USG40_4.60%28AALA.1%29C0_2.pdf",
        "https://businessforum.zyxel.com/discussion/5252/zld-v4-60-revoke-and-wk48-firmware-release",
        "https://businessforum.zyxel.com/discussion/5254/whats-new-for-zld4-60-patch-1-available-on-dec-15",
        "https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html",
        "https://www.secpod.com/blog/a-secret-zyxel-firewall-and-ap-controllers-could-allow-for-administrative-access-cve-2020-29583/",
        "https://www.zyxel.com/support/CVE-2020-29583.shtml",
        "https://www.zyxel.com/support/security_advisories.shtml",
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-29583"
    ]
}