Zyxel Cloudcnm Secumanager vulnerabilities

35 known vulnerabilities affecting zyxel/cloudcnm_secumanager.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL7HIGH5MEDIUM23

Vulnerabilities

Page 2 of 2

CVE-2020-15337MEDIUMCVSS 5.3v3.1.0v3.1.12022-09-29

CVE-2020-15337 [MEDIUM] CWE-862 CVE-2020-15337: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Str Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /registerCpe requests.

nvd

CVE-2020-15322CRITICALCVSS 9.8v3.1.0v3.1.12020-06-29

CVE-2020-15322 [CRITICAL] CWE-798 CVE-2020-15322: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debia Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account.

nvd

CVE-2020-15323CRITICALCVSS 9.8v3.1.0v3.1.12020-06-29

CVE-2020-15323 [CRITICAL] CWE-798 CVE-2020-15323: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account defa Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account default credentials.

nvd

CVE-2020-15320CRITICALCVSS 9.8v3.1.0v3.1.12020-06-29

CVE-2020-15320 [CRITICAL] CWE-798 CVE-2020-15320: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account. Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account.

nvd

CVE-2020-15321CRITICALCVSS 9.8v3.1.0v3.1.12020-06-29

CVE-2020-15321 [CRITICAL] CWE-798 CVE-2020-15321: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account. Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account.

nvd

CVE-2020-15312MEDIUMCVSS 5.9v3.1.0v3.1.12020-06-29

CVE-2020-15312 [MEDIUM] CWE-798 CVE-2020-15312: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account. Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account.

nvd

CVE-2020-15318MEDIUMCVSS 5.9v3.1.0v3.1.12020-06-29

CVE-2020-15318 [MEDIUM] CWE-798 CVE-2020-15318: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within t Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/mysql chroot directory tree.

nvd

CVE-2020-15316MEDIUMCVSS 5.9v3.1.0v3.1.12020-06-29

CVE-2020-15316 [MEDIUM] CWE-798 CVE-2020-15316: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account within Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account within the /opt/axess chroot directory tree.

nvd

CVE-2020-15315MEDIUMCVSS 5.9v3.1.0v3.1.12020-06-29

CVE-2020-15315 [MEDIUM] CWE-798 CVE-2020-15315: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within t Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/axess chroot directory tree.

nvd

CVE-2020-15314MEDIUMCVSS 5.9v3.1.0v3.1.12020-06-29

CVE-2020-15314 [MEDIUM] CWE-798 CVE-2020-15314: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account. Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account.

nvd

CVE-2020-15319MEDIUMCVSS 5.9v3.1.0v3.1.12020-06-29

CVE-2020-15319 [MEDIUM] CWE-798 CVE-2020-15319: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within t Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/mysql chroot directory tree.

nvd

CVE-2020-15313MEDIUMCVSS 5.9v3.1.0v3.1.12020-06-29

CVE-2020-15313 [MEDIUM] CWE-798 CVE-2020-15313: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account. Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account.

nvd

CVE-2020-15317MEDIUMCVSS 5.9v3.1.0v3.1.12020-06-29

CVE-2020-15317 [MEDIUM] CWE-798 CVE-2020-15317: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within t Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/axess chroot directory tree.

nvd

CVE-2020-15336HIGHCVSS 7.5v3.1.0v3.1.12020-06-26

CVE-2020-15336 [HIGH] CWE-306 CVE-2020-15336: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests. Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests.

nvd

CVE-2020-15335HIGHCVSS 7.5v3.1.0v3.1.12020-06-26

CVE-2020-15335 [HIGH] CWE-306 CVE-2020-15335: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests. Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests.

nvd

← Previous2 / 2