Vulnerabilities

Filters

2 selected

35 records

Sort

Vendor: Zyxel Component: Cloudcnm Secumanager Clear all filters

TI-2020-12076 CVE-2020-15323 · GHSA-v3m3-hp7j-gg84

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account default credentials.

MEDIUM 45

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account default credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0125 Published 2020-06-29 No fix listed CWE-798

TI-2020-12075 CVE-2020-15322 · GHSA-qxqc-wrvx-gr3v

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account.

MEDIUM 45

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0125 Published 2020-06-29 No fix listed CWE-798

TI-2020-12074 CVE-2020-15321 · GHSA-7vjf-h2h5-h642

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account.

MEDIUM 45

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0125 Published 2020-06-29 No fix listed CWE-798

TI-2020-12073 CVE-2020-15320 · GHSA-9h9j-mh7w-h3c5

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account.

MEDIUM 45

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0125 Published 2020-06-29 No fix listed CWE-798

TI-2020-12072 CVE-2020-15319 · GHSA-j6pm-fcmp-5r7x

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root…

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/mysql chroot directory tree.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00997 Published 2020-06-29 No fix listed CWE-798

TI-2020-12071 CVE-2020-15318 · GHSA-wm75-j8mg-jjcr

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root…

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/mysql chroot directory tree.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00997 Published 2020-06-29 No fix listed CWE-798

TI-2020-12070 CVE-2020-15317 · GHSA-w7q3-jp3j-r2qw

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root…

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/axess chroot directory tree.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00976 Published 2020-06-29 No fix listed CWE-798

TI-2020-12069 CVE-2020-15316 · GHSA-rpvw-h6p6-jpjw

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root…

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account within the /opt/axess chroot directory tree.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00976 Published 2020-06-29 No fix listed CWE-798

TI-2020-12068 CVE-2020-15315 · GHSA-gr29-cfq9-f85x

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root…

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/axess chroot directory tree.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00976 Published 2020-06-29 No fix listed CWE-798

TI-2020-12067 CVE-2020-15314 · GHSA-7xr9-3w5r-xjcg

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account.

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00976 Published 2020-06-29 No fix listed CWE-798

TI-2020-12066 CVE-2020-15313 · GHSA-vw7q-vwxc-j4q4

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account.

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00976 Published 2020-06-29 No fix listed CWE-798

TI-2020-12065 CVE-2020-15312 · GHSA-553m-p4h3-3fm6

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account.

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00976 Published 2020-06-29 No fix listed CWE-798

TI-2020-12085 CVE-2020-15332 · GHSA-8cmp-crm3-jrh4

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions.

MEDIUM 44

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2020-06-26 No fix listed CWE-312

TI-2020-12086 CVE-2020-15333 · GHSA-c56x-jj48-c26x

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via…

LOW 26

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL "select * from Administrator_users" and "select * from Users_users" requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00952 Published 2020-06-26 No fix listed CWE-89

TI-2020-12087 CVE-2020-15334 · GHSA-c92g-v88w-8m3q

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log/axxmpp.log file.

LOW 25

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log/axxmpp.log file.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00784 Published 2020-06-26 No fix listed

TI-2020-12088 CVE-2020-15335 · GHSA-j9rw-93pg-vf76

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests.

LOW 35

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00934 Published 2020-06-26 No fix listed CWE-306

TI-2020-12089 CVE-2020-15336 · GHSA-r6qq-j76p-jxmq

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests.

LOW 35

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00934 Published 2020-06-26 No fix listed CWE-306

TI-2020-12090 CVE-2020-15337 · GHSA-gm39-37pc-phq8

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With…

LOW 25

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /registerCpe requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0079 Published 2020-06-26 No fix listed CWE-862

TI-2020-12091 CVE-2020-15338 · GHSA-pc3r-489c-2frh

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With…

LOW 25

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /cnr requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00759 Published 2020-06-26 No fix listed CWE-862

TI-2020-12092 CVE-2020-15339 · GHSA-7mx3-7x4v-qcc4

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows…

LOW 28

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handle_campaign_script_link?script_name= XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00714 Published 2020-06-26 No fix listed CWE-79

TI-2020-12093 CVE-2020-15340 · GHSA-j998-7c5c-mpgq

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded…

LOW 34

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess/TR69/Handlers/turbolink/sshkeys/id_rsa SSH key.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00738 Published 2020-06-26 No fix listed CWE-311

TI-2020-12094 CVE-2020-15341 · GHSA-qc5v-rcvf-wgrv

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API.

LOW 35

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01059 Published 2020-06-26 No fix listed CWE-522

TI-2020-12095 CVE-2020-15342 · GHSA-f7r8-4372-249c

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user API.

LOW 25

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00562 Published 2020-06-26 No fix listed CWE-311

TI-2020-12096 CVE-2020-15343 · GHSA-wfff-jr55-cv4r

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API.

LOW 25

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0058 Published 2020-06-26 No fix listed CWE-311

TI-2020-12097 CVE-2020-15344 · GHSA-fqrq-3m9w-g64q

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API.

LOW 25

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00568 Published 2020-06-26 No fix listed CWE-311