Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Does anyone know if upgrading firmware will modify the default root password? #1

Open
bjmc opened this issue Apr 4, 2021 · 1 comment

Comments

@bjmc
Copy link

bjmc commented Apr 4, 2021

I'm considering upgrading to the latest firmware from the Zyxel FTP site, but I don't want to lose root access to my router. According to this the key/password derivation functions are based on hardcoded parameters from an individual unit, like its serial numbers. Presumably those parameters will stay constant, even if the firmware changes, but I suppose it's possible they've modified the password-derivation algorithm in the new version.

Does anyone know if upgrading the firmware on Zyxel units results in a different default root password?

@ThomasRinsma
Copy link
Owner

In my experience over the last year with several updates, the passwords were not changed. It is indeed also true that there are mechanisms to derive the different passwords, but I think they are not used anymore (at least in my case). At least not for admin and supervisor: those seem to be set dynamically by the ISP.

Either way, there is of course nothing preventing Zyxel or your ISP from modifying any of the passwords, or the related code.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants