Consumer Rights Wiki

Zyxel: Difference between revisions

VisualWikitext
Added a comment about Zyxel neglecting to fix security bugs in their routers they still sell, and then lying that they are no longer selling them.
 
 
(13 intermediate revisions by 11 users not shown)
Line 1: Line 1:
Router maker Zyxel says it has no plans to release a patch for two *actively exploited* flaws in its routers affecting potentially thousands of customers.
{{Stub}}
{{CompanyCargo
|Founded = 1989
|Industry = Telecommunication
|Logo = Zyxel Logo.png
|ParentCompany = Zyxel Group Corp
|Type = Private
|Website = https://www.zyxel.com/
|Description = Zyxel is a telecommunication company that was founded in 1989 in Taiwan. They are most known to create consumer grade routers but also produce enterprise equipment.
}}


Instead, Zyxel is advising customers to rip out affected devices and buy new routers. However, the affected buggy routers are still available for purchase.
'''{{Wplink|Zyxel}}''' is a telecommunication company that was founded in 1989 in Taiwan. They are most known to create consumer grade routers but also produce enterprise equipment.


Article: https://techcrunch.com/2025/02/05/router-maker-zyxel-tells-customers-to-replace-vulnerable-hardware-exploited-by-hackers/
Zyxel Communications Corporation is a subisidiary of Zyxel Group Corporation.  


Source: https://mastodon.social/@zackwhittaker/113951421812871589
==Incidents==
===Zyxel refuses to release patches for actively exploited zero-day vulnerabilities (''2024-2025'')===
Zyxel released a statement announcing they had no plans to release a patch for two actively exploited flaws ({{Wplink|Zero-day vulnerability|zero-day vulnerabilities}}) in its routers, potentially affecting thousands of customers. The company advised customers to buy new routers despite the fact that the affected routers were still possible to buy online.<ref>{{Cite web |author= |title=Zyxel security advisory for command injection and insecure default credentials vulnerabilities in certain legacy DSL CPE |url=https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025 |website=Zyxel |date=4 Feb 2025 |access-date=26 Jan 2026 |url-status=live |archive-url=http://web.archive.org/web/20251112144418/https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025 |archive-date=12 Nov 2025}}</ref><ref>{{Cite web |last=Page |first=Carly |title=Router maker Zyxel tells customers to replace vulnerable hardware exploited by hackers |url=https://techcrunch.com/2025/02/05/router-maker-zyxel-tells-customers-to-replace-vulnerable-hardware-exploited-by-hackers/ |website=TechCrunch |date=5 Feb 2025 |access-date=26 Jan 2026 |url-status=live |archive-url=http://web.archive.org/web/20260217010206/https://techcrunch.com/2025/02/05/router-maker-zyxel-tells-customers-to-replace-vulnerable-hardware-exploited-by-hackers/ |archive-date=17 Feb 2026}}</ref><ref>{{Cite web |last=Whittaker |first=Zack |title=Zack Whittaker on Mastodon |url=https://mastodon.social/@zackwhittaker/113951421812871589 |website=Mastodon |date=5 Feb 2025 |access-date=26 Jan 2026 |url-status=live |archive-url=http://web.archive.org/web/20250226161148/https://mastodon.social/@zackwhittaker/113951421812871589 |archive-date=26 Feb 2025}}</ref>
 
==References==
{{Reflist}}
 
[[Category:{{PAGENAME}}]]
Retrieved from "https://consumerrights.wiki/w/Zyxel"