Exploitation underway. Check your Zyxel firewall version and patch. CVE-2022-30525
Quote Tweet
Replying to @Shadowserver
We see at least 20 800 of the potentially affected Zyxel firewall models (by unique IP) accessible on the Internet. Most popular are USG20-VPN (10K IPs) and USG20W-VPN (5.7K IPs).
Most of the CVE-2022-30525 affected models are in the EU - France (4.5K) and Italy (4.4K).

