Zyxel

Records341All Threatist records

Exploited (KEV)13In CISA KEV

CVSS critical64CVSS 9.0–10.0

CVSS high136CVSS 7.0–8.9

Exploited now

Zyxel records in CISA KEV

TI-2026-06387 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability CRITICAL 97KEV 2026-09-21 TI-2024-27255 Zyxel DSL CPE OS Command Injection Vulnerability CRITICAL 97KEV 2025-02-11 TI-2024-27256 Zyxel DSL CPE OS Command Injection Vulnerability CRITICAL 97KEV 2025-02-11 TI-2024-10813 Zyxel Multiple Firewalls Path Traversal Vulnerability CRITICAL 99KEV 2024-12-03 TI-2017-04616 Zyxel EMG2926 Routers Command Injection Vulnerability CRITICAL 97KEV 2023-09-18 TI-2017-13541 Zyxel P660HN-T1A Routers Command Injection Vulnerability CRITICAL 100KEV 2023-08-07

Components

Products in the NVD configurations · select one to filter the records

Cloudcnm Secumanager 35 records MEDIUM Gs1900-10hp Firmware 35 records CRITICAL Usg Flex 100w Firmware 34 records CRITICAL Usg Flex 200 Firmware 34 records CRITICAL Usg Flex 500 Firmware 34 records CRITICAL Usg Flex 700 Firmware 34 records CRITICAL Usg Flex 100 Firmware 30 records CRITICAL Emg3525-t50b Firmware 28 records MEDIUM

Records

35 records in Cloudcnm Secumanager · all components

TI-2020-12100 CVE-2020-15347 · GHSA-r5p6-3838-g6hr

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account.

MEDIUM 45

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01307 Published 2020-06-26 No fix listed CWE-522

TI-2020-12076 CVE-2020-15323 · GHSA-v3m3-hp7j-gg84

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account default credentials.

MEDIUM 45

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account default credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0125 Published 2020-06-29 No fix listed CWE-798

TI-2020-12075 CVE-2020-15322 · GHSA-qxqc-wrvx-gr3v

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account.

MEDIUM 45

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0125 Published 2020-06-29 No fix listed CWE-798

TI-2020-12074 CVE-2020-15321 · GHSA-7vjf-h2h5-h642

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account.

MEDIUM 45

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0125 Published 2020-06-29 No fix listed CWE-798

TI-2020-12073 CVE-2020-15320 · GHSA-9h9j-mh7w-h3c5

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account.

MEDIUM 45

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0125 Published 2020-06-29 No fix listed CWE-798

TI-2020-12085 CVE-2020-15332 · GHSA-8cmp-crm3-jrh4

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions.

MEDIUM 44

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2020-06-26 No fix listed CWE-312

TI-2020-12084 CVE-2020-15331 · GHSA-497f-57wj-pwc5

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRET_KEY in /opt/axess/etc/default/axess.

MEDIUM 44

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRET_KEY in /opt/axess/etc/default/axess.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2020-06-26 No fix listed CWE-311

TI-2020-12094 CVE-2020-15341 · GHSA-qc5v-rcvf-wgrv

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API.

LOW 35

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01059 Published 2020-06-26 No fix listed CWE-522

TI-2020-12089 CVE-2020-15336 · GHSA-r6qq-j76p-jxmq

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests.

LOW 35

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00934 Published 2020-06-26 No fix listed CWE-306

TI-2020-12088 CVE-2020-15335 · GHSA-j9rw-93pg-vf76

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests.

LOW 35

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00934 Published 2020-06-26 No fix listed CWE-306

TI-2020-12080 CVE-2020-15327 · GHSA-h2gg-hfpq-2f33

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication.

LOW 35

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00963 Published 2020-06-26 No fix listed CWE-798

TI-2020-12093 CVE-2020-15340 · GHSA-j998-7c5c-mpgq

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded…

LOW 34

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess/TR69/Handlers/turbolink/sshkeys/id_rsa SSH key.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00738 Published 2020-06-26 No fix listed CWE-311

TI-2020-12092 CVE-2020-15339 · GHSA-7mx3-7x4v-qcc4

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows…

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handle_campaign_script_link?script_name= XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00714 Published 2020-06-26 No fix listed CWE-79

TI-2020-12072 CVE-2020-15319 · GHSA-j6pm-fcmp-5r7x

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root…

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/mysql chroot directory tree.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00997 Published 2020-06-29 No fix listed CWE-798

TI-2020-12071 CVE-2020-15318 · GHSA-wm75-j8mg-jjcr

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root…

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/mysql chroot directory tree.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00997 Published 2020-06-29 No fix listed CWE-798

TI-2020-12070 CVE-2020-15317 · GHSA-w7q3-jp3j-r2qw

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root…

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/axess chroot directory tree.