Zyxel fixes zero-day exploited to hack nearly 1,000 switches
Zyxel has released a fix for a zero-day flaw in its network switches. According to BleepingComputer, the flaw was exploited to hack nearly 1,000 devices. Administrators should apply the update to affected switches as soon as possible.
What happened
Zyxel has fixed a zero-day flaw in its network switches. According to BleepingComputer, the flaw was used to hack nearly 1,000 devices before the fix.
Why it matters
Compromised switches can disrupt the corporate network and expose company traffic. Organizations running Zyxel switches are in the scope of the reported attack.
What to do
Apply the Zyxel update to all affected switches immediately and check for compromised devices.
For the technical team
- Affected
- Switches de rede Zyxel (modelos não especificados no item) · Zyxel network switches. Models and versions not specified in the source.
- Exploitation
- Exploitation reported by BleepingComputer: nearly 1,000 switches hacked using the flaw.
- Fix
- Update released by Zyxel. Fixed versions not specified in the source.
- Vector
- Zero-day flaw in Zyxel network switches. The source does not detail component, flaw type, or exploitation condition.
- More details
- Sole source is the BleepingComputer tweet. CVE, discoverer, and attack chain are not mentioned.
Timeline
Incident opened.
Sources 1 source
- @BleepinComputer @BleepinComputer
