Zyxel Cloudcnm Secumanager vulnerabilities, page 2
35 vulnerabilities
Known vulnerabilities in Zyxel Cloudcnm Secumanager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-15332zyxelcloudcnm_secumanager
EPSS score0.89%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions.CVE-2020-15315zyxelcloudcnm_secumanagerEPSS score0.98%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/axess chroot directory tree.CVE-2020-15331zyxelcloudcnm_secumanagerEPSS score0.89%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRET_KEY in /opt/axess/etc/default/axess.CVE-2020-15330zyxelcloudcnm_secumanagerEPSS score0.57%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP_KEY in /opt/axess/etc/default/axess.CVE-2020-15327zyxelcloudcnm_secumanagerEPSS score0.96%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication.CVE-2020-15346zyxelcloudcnm_secumanagerEPSS score0.57%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key.CVE-2020-15316zyxelcloudcnm_secumanagerEPSS score0.98%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account within the /opt/axess chroot directory tree.CVE-2020-15317zyxelcloudcnm_secumanagerEPSS score0.98%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/axess chroot directory tree.CVE-2020-15336zyxelcloudcnm_secumanagerEPSS score0.93%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests.CVE-2020-15342zyxelcloudcnm_secumanagerEPSS score0.56%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user API.CVE-2020-15312zyxelcloudcnm_secumanagerEPSS score0.98%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account.CVE-2020-15313zyxelcloudcnm_secumanagerEPSS score0.98%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account.CVE-2020-15333zyxelcloudcnm_secumanagerEPSS score0.95%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL "select * from Administrator_users" and "select * from Users_users" requests.CVE-2020-15329zyxelcloudcnm_secumanagerEPSS score0.85%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions.CVE-2020-15338zyxelcloudcnm_secumanagerEPSS score0.76%
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /cnr requests.