CVE:CVE-2020-29583
CNNVD:CNNVD-202012-1459
Zyxel USG Series是中国合勤（Zyxel）公司的一系列用于公司环境的防火墙设备。
Zyxel USG devices Firmware version 4.60 存在安全漏洞，该漏洞源于包含一个无文档的帐户(zyfwp)和一个不可更改的密码。这个帐户的密码可以在固件的明文中找到。用户可以使用该帐户以管理员权限登录到ssh服务器或web界面。
solution:Upgrade zyxel usg20-vpn_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel usg20w-vpn_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel usg40_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel usg40w_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel usg60_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel usg60w_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel usg110_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel usg210_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel usg310_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel usg1100_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel usg1900_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel usg2200_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel zywall110_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel zywall310_firmware to a higher version than 4.60,and avoid the version 4.60; Upgrade zyxel zywall1100_firmware to a higher version than 4.60,and avoid the version 4.60