ZYXEL ISSUES EMERGENCY PATCH FOR END-OF-LIFE NAS DEVICES

Summary from the TLDR InfoSec newsletter

Zyxel Networks has released a patch to address 3 critical vulnerabilities on older NAS devices. The vulnerabilities allowed for remote code execution. However, two flaws that could lead to information disclosure and privilege escalation were not fixed. Zyxel released these patches even though the devices have reached end-of-life as they were of critical severity and proof-of-concept exploits exist.