It’s 2020 and pre-auth, superuser command injection is still a thing
Zyxel’s network storage boxes, business VPN gateways, firewalls, and, er, security scanners can be remotely hijacked by any miscreant, due to a devastating security hole in the firmware.…
Source:: Register