Security News > 2023 > June > Zyxel shares tips on protecting firewalls from ongoing attacks

Zyxel has published a security advisory containing guidance on protecting firewall and VPN devices from ongoing attacks and detecting signs of exploitation.

This warning comes in response to multiple reports of widespread exploitation of the CVE-2023-28771 and the exploitability and severity of CVE-2023-33009 and CVE-2023-33010, all impacting Zyxel VPN and firewall devices.

"Zyxel has been urging users to install the patches through multiple channels, including issuing several security advisory newsletters to registered users and advisory subscribers; notifying users to upgrade via the Web GUI's push notification for on-premises devices; and enforcing scheduled firmware upgrades for cloud-based devices that haven't yet done so," warns Zyxel's security advisory.

If admins need to manage devices over WAN, they should enable 'Policy Control' and add rules allowing only trusted IP addresses to access the devices.

Finally, Zyxel recommends disabling UDP Port 500 and Port 4500 if IPSec VPN isn't needed, shutting another avenue for attacks.

It is important to remember that attacks against the listed products are currently underway, and they're only expected to increase in volume and severity, so taking action to protect your devices as soon as possible is imperative.

News URL

https://www.bleepingcomputer.com/news/security/zyxel-shares-tips-on-protecting-firewalls-from-ongoing-attacks/