virus logo Intrusion Prevention

Zyxel.PK5001Z.Modem.Backdoor

description-logoDescription

This indicates detection of a Security Bypass vulnerability in ZyXEL PK5001Z Modem.
The vulnerability is due to a hard-coded password in the Modem's firmware. Remote attackers can obtain access to the device with this password by sending a special request to a specific UDP port.

affected-products-logoAffected Products

ZyXEL PK5001Z Modem

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Currently we are not aware of any vendor supplied patch for this vulnerability.
Monitor the traffic from that network for any suspicious activity.

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Status Detail
2019-06-06 14.627
Modified
 Severity:critical:high
2019-02-01 14.540
Modified
 Name:ZyXEL.
PK5001Z.
Modem.
Backdoor:Zyxel.
PK5001Z.
Modem.
Backdoor

References

https://www.exploit-db.com/exploits/43105/
ID 44971
Created Dec 06, 2017
Updated Jun 07, 2021
CVE ID
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
Exploit Prediction Score 16.91%
Default Action drop
Active
Affected OS Other
Affected App Other
Profile Type Improper Authentication