Zyxel is warning {that a} unhealthy safety signature replace is inflicting essential errors for USG FLEX or ATP Collection firewalls, together with placing the machine right into a boot loop.
“We have discovered a problem affecting just a few gadgets that will trigger reboot loops, ZySH daemon failures, or login entry issues,” warns a brand new Zyxel advisory.
“The system LED might also flash. Please notice that is not associated to a CVE or safety difficulty.”
Zyxel says the problems are brought on by a failure in an Software Signature Replace for its cybersecurity options that was pushed out on 1/24 by way of 1/25 at night time.
Gadgets that acquired the defective replace at the moment are experiencing a variety of points, together with:
- Gadget Error: Incorrect CLI command, machine timeout or machine logout.
- Unable to login to ATP/USG FLEX through internet GUI: 504 Gateway timeout.
- CPU utilization is excessive.
- In Monitor > Log, the message “ZySH daemon is busy” appeared.
- Unable to enter any instructions on console.
- Coredump messages seem on console.
Zyxel says solely USG FLEX or ATP Collection (ZLD Firmware Variations) firewalls with lively safety licenses are impacted. Gadgets on the Nebula platform or USG FLEX H (uOS) sequence usually are not affected.
As first reported by Born Metropolis, the one approach to repair the difficulty is to have bodily entry to the firewall and to hook up with the console through an RS232 serial cable.
“This restoration requires a console cable and have to be achieved on-site. Whereas it isn’t very best, it is the one assured resolution for this difficulty,” reads the advisory.
Supply: Zyxel
Admins will now must conduct a sequence of steps to revive the firewall, together with backing up the configuration, downloading and making use of a particular firmware, after which connecting through the online GUI to revive the backed-up configuration file.
Zyxel has shared detailed steps in its advisory, and it’s extremely advisable that admins evaluation them earlier than making an attempt to get well gadgets.
For patrons who’ve additional questions or want help, Zyxel can be internet hosting a Microsoft Groups Open Query Session on Saturday January twenty fifth from 9am – 12pm and 1pm – 5pm (GMT +1).
BleepingComputer has contacted Zyxel with questions concerning the incident, however no reply was instantly acquired.
