June 16, 2021

Zyxel Joins CVE Program as a CVE Numbering Authority (CNA)

Establishment as CNA Recognizes Zyxel’s Commitment to Security Disclosures and Enhances its Vulnerability Reporting

Share this

ANAHEIM, Calif.--(June 16, 2021)--Zyxel, a leader in delivering secure, AI- and cloud-powered home and business solutions, today announced that it has been named a Common Vulnerability and Exposure Numbering Authority (CNA), joining an elite group of vendors recognized by the CVE Program and strengthening its security reporting moving forward.

The CVE Program identifies and catalogs security vulnerabilities in software and hardware components worldwide, providing trusted public disclosures so IT professionals, end-users, and other stakeholders can take timely action to prevent attacks exploiting these vulnerabilities.

As a CNA, Zyxel can now assign CVE identification numbers to newly discovered vulnerabilities involving its products. This will allow Zyxel to directly establish new CVEs and streamline the reporting process.

Zyxel’s Chief Information Security Officer, Edward Yu, said that receiving the authorization was a vote of confidence in the company and explained that it would allow users to have even greater confidence in the security of Zyxel’s products.

“With vulnerabilities increasing year over year, no company’s products can be completely vulnerability-free,” Yu said. “The ways in which we identify and resolve vulnerabilities is of utmost importance, and becoming established as a CNA is recognition of how seriously we take these issues and the work we put in to address them.”

Yu continued, “We have a dedicated PSIRT team that handles all product-related security vulnerabilities. We also have a robust reporting channel and disclosure policy, and we work with security researchers and the CVE Program to disclose and solve vulnerabilities to ensure optimal protection for our customers.”

Currently, only 169 companies from 28 countries have been established as CNAs. Zyxel joins a small group of security-minded networking brands and is one of the first in the SMB market to receive the authorization.

About Zyxel:

Since their first day in business over 30 years ago, Zyxel has kept business and home users online with a focus on innovation and customer-centric service. In 1989, this was accomplished with analog modems. Today, the company combines the benefits of artificial intelligence (AI) and the cloud to deliver rapid, reliable, and secure networking solutions for business and home users.

Zyxel is a global force in the communications market with an unrivaled international presence that includes:

  • 150 markets served 
  • 1,000,000 businesses working smarter with Zyxel solutions 
  • 100 million devices creating global connections

We’re building the networks of tomorrow, unlocking potential, and meeting the needs of the modern workplace—powering people at work, play, and life.