Let me summarize the issue: "I was surprised to find a user account 'zyfwp' with a password hash" "this account seemed to work on both the SSH and web interfa

Let me summarize the issue: "I was surprised to find a user account 'zyfwp' with a password hash" "this account seemed to work on both the SSH and web interface" "Globally, more than 100.000 devices have exposed their web interface to the internet" Linux manages to auto update itself by fetching updates from the outside, when IT wants to do so. Zyxel tried to add a function where THEY can access devices over the internet and do who-knows-what whenever they wanted. And they did such a poor job of that, that they managed to give access to the devices to everybody.