ZYXEL WON'T PATCH NEWLY EXPLOITED FLAWS IN END-OF-LIFE ROUTERS

Summary from the TLDR InfoSec newsletter

Zyxel has issued a security advisory about actively exploited flaws in CPE series devices that it has no plans to fix. VulnCheck released the full details of two CVEs - one is for insecure default passwords and the other is for improper command validation leading to command injection. According to FOFA and Censys, there are over 1,500 potentially vulnerable devices that are internet exposed.