Zyxel Urges Customers to Replace Vulnerable Routers Targeted by Hackers for Enhanced Security
In a concerning development for users of Zyxel hardware, the Taiwanese manufacturer has announced it will not release a patch for two critical vulnerabilities that are currently being exploited. These security flaws could impact thousands of customers, leading to serious risks such as system compromise and data breaches.
Details of the Vulnerabilities Affecting Zyxel Routers
Threat intelligence firm GreyNoise highlighted the critical nature of these vulnerabilities late last month, indicating that attackers could execute arbitrary commands on affected devices. This could result in:
- Complete system compromise
- Data exfiltration
- Network infiltration
Discovery and Reporting Timeline
The vulnerabilities, tracked as CVE-2024-40890 and CVE-2024-40891, were initially discovered by VulnCheck in July of last year. They were reported to Zyxel in August but had not been addressed or disclosed until recently. Zyxel stated that it became aware of these issues on January 29, just a day after GreyNoise alerted the public about ongoing exploitation.
Zyxel’s Response to Security Risks
Zyxel, which serves over 1 million businesses globally, has indicated that it will not provide patches for these vulnerabilities, citing that they affect “legacy products that have reached end-of-life (EOL) for years.” Instead, the company recommends that customers upgrade to newer-generation products for improved security.
Implications for Affected Users
Despite Zyxel’s claims, some of the vulnerable models are still available for purchase on platforms like Amazon, raising concerns about user safety. Jacob Baines, CTO at VulnCheck, emphasized the ongoing relevance of these older systems due to their continued use and the persistent interest from cyber attackers.
According to Censys, a search engine for Internet of Things devices, nearly 1,500 vulnerable Zyxel devices are still exposed to the internet. Furthermore, GreyNoise reported that botnets, including the notorious Mirai, are exploiting one of these vulnerabilities, indicating a potential for large-scale attacks.
Final Thoughts
The lack of a patch from Zyxel for these critical vulnerabilities is alarming for customers relying on their hardware. Users are urged to consider transitioning to newer models to safeguard their networks and sensitive data. As the threat landscape continues to evolve, staying informed and proactive is crucial in maintaining security.
For more information on cybersecurity best practices, visit Cybersecurity & Infrastructure Security Agency.
