Zyxel Cloud Cnm Secumanager vulnerabilities

2 vulnerabilities

Known vulnerabilities in Zyxel Cloud Cnm Secumanager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2020-15324zyxel · cloud_cnm_secumanagerzyxel cloud_cnm_secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_config.py file that stores hardcoded credentials.EPSS1.25%10CriticalCVE-2020-15348zyxel · cloud_cnm_secumanagerzyxel cloud_cnm_secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager/delete_cpes_by_ids?cpe_ids= for eval injection of Python code.EPSS1.75%