Zyxel Cloudcnm Secumanager vulnerabilities
35 vulnerabilities
Known vulnerabilities in Zyxel Cloudcnm Secumanager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-15335zyxelcloudcnm_secumanager
EPSS score0.93%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests.CVE-2020-15318zyxelcloudcnm_secumanagerEPSS score1.00%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/mysql chroot directory tree.CVE-2020-15328zyxelcloudcnm_secumanagerEPSS score0.85%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions.CVE-2020-15325zyxelcloudcnm_secumanagerEPSS score0.57%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication.CVE-2020-15319zyxelcloudcnm_secumanagerEPSS score1.00%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/mysql chroot directory tree.CVE-2020-15321zyxelcloudcnm_secumanagerEPSS score1.25%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account.CVE-2020-15345zyxelcloudcnm_secumanagerEPSS score0.57%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_instances_for_update API.CVE-2020-15337zyxelcloudcnm_secumanagerEPSS score0.79%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /registerCpe requests.CVE-2020-15320zyxelcloudcnm_secumanagerEPSS score1.25%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account.CVE-2020-15339zyxelcloudcnm_secumanagerEPSS score0.71%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handle_campaign_script_link?script_name= XSS.CVE-2020-15347zyxelcloudcnm_secumanagerEPSS score1.31%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account.CVE-2020-15340zyxelcloudcnm_secumanagerEPSS score0.74%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess/TR69/Handlers/turbolink/sshkeys/id_rsa SSH key.CVE-2020-15314zyxelcloudcnm_secumanagerEPSS score0.98%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account.CVE-2020-15322zyxelcloudcnm_secumanagerEPSS score1.25%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account.CVE-2020-15323zyxelcloudcnm_secumanagerEPSS score1.25%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account default credentials.CVE-2020-15343zyxelcloudcnm_secumanagerEPSS score0.58%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API.CVE-2020-15334zyxelcloudcnm_secumanagerEPSS score0.78%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log/axxmpp.log file.CVE-2020-15326zyxelcloudcnm_secumanagerEPSS score0.53%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem.CVE-2020-15344zyxelcloudcnm_secumanagerEPSS score0.57%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API.CVE-2020-15341zyxelcloudcnm_secumanagerEPSS score1.06%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API.