Zyxel Firewall and VPN Devices Have Critical Security Flaws, Warns Company

Zyxel has warned of two critical-severity vulnerabilities in several of its firewall and VPN products that could allow denial-of-service (DoS) and remote code execution on vulnerable devices. The buffer overflow issues affect devices running specific firmware versions and can be exploited without authentication. Zyxel has released patches for the affected products and advises users to install them as soon as possible. Small to medium-sized businesses use these devices to protect their networks and allow secure network access to remote or home-based workers.