Backdoor account discovered in more than 100k Zyxel firewalls, VPN gateways

Posted by 1cvmask on Saturday January 02, 2021 @08:02AM
from the zdnet.com dept.

https://www.zdnet.com/article/backdoor-account-discovered-in-more-than-100000-zyxel-firewalls-vpn-gateways/

( 6 comments | 18 points | on HN )

Re:Backdoor account discovered in more than 100k Zyxel firew... by smileypete on Saturday January 02, 2021 @02:54PM (#25615854)

Automated testing needs to be able to check that any dev/debug code doesn't exist in production.

(Only works if the dev/debug code is added in some sort of properly planned and documented way I guess.)

[ Parent | on HN ]

Re:Backdoor account discovered in more than 100k Zyxel firew... by stareatgoats on Saturday January 02, 2021 @05:16PM (#25617090)

You seem to assume that this was a mistake. What is to say that this was not deliberately planted albeit with plausible deniability?

[ Parent | on HN ]

Re:Backdoor account discovered in more than 100k Zyxel firew... by bolle on Saturday January 02, 2021 @03:01PM (#25615942)

Previous discussion: https://news.ycombinator.com/item?id=25539876

[ Parent | on HN ]

Re:Backdoor account discovered in more than 100k Zyxel firew... by bzb6 on Saturday January 02, 2021 @11:07AM (#25613689)

Most people will be suspicious of a Chinese router having backdoors when it’s probably the consequence of shoddy programming.

[ Parent | on HN ]

Re:Backdoor account discovered in more than 100k Zyxel firew... by pacamara619 on Saturday January 02, 2021 @01:39PM (#25615149)

Yes, maybe shoddy programming, maybe plausible deniability.

[ Parent | on HN ]

Re:Backdoor account discovered in more than 100k Zyxel firew... by rishabhd on Saturday January 02, 2021 @02:22PM (#25615563)

I thought zyxel was taiwan based. Also, big customer base in soho/ government (atleast in India, thanks to vendors who design their networks for them).

[ Parent | on HN ]