Zyxel Cloudcnm Secumanager vulnerabilities
35 known vulnerabilities affecting zyxel/cloudcnm_secumanager.
Total CVEs
35
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL7HIGH5MEDIUM23
Vulnerabilities
Page 2 of 2
CVE-2020-15315P4MEDIUMCVSS 5.9v3.1.0v3.1.12020-06-29
CVE-2020-15315 [MEDIUM] CWE-798 CVE-2020-15315: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within t
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/axess chroot directory tree.
nvd
CVE-2020-15317P4MEDIUMCVSS 5.9v3.1.0v3.1.12020-06-29
CVE-2020-15317 [MEDIUM] CWE-798 CVE-2020-15317: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within t
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/axess chroot directory tree.
nvd
CVE-2020-15318P4MEDIUMCVSS 5.9v3.1.0v3.1.12020-06-29
CVE-2020-15318 [MEDIUM] CWE-798 CVE-2020-15318: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within t
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/mysql chroot directory tree.
nvd
CVE-2020-15319P4MEDIUMCVSS 5.9v3.1.0v3.1.12020-06-29
CVE-2020-15319 [MEDIUM] CWE-798 CVE-2020-15319: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within t
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/mysql chroot directory tree.
nvd
CVE-2020-15346P4MEDIUMCVSS 5.3v3.1.0v3.1.12022-09-29
CVE-2020-15346 [MEDIUM] CWE-311 CVE-2020-15346: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key.
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key.
nvd
CVE-2020-15329P4MEDIUMCVSS 5.3v3.1.0v3.1.12022-09-29
CVE-2020-15329 [MEDIUM] CWE-732 CVE-2020-15329: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions.
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions.
nvd
CVE-2020-15337P4MEDIUMCVSS 5.3v3.1.0v3.1.12022-09-29
CVE-2020-15337 [MEDIUM] CWE-862 CVE-2020-15337: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Str
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /registerCpe requests.
nvd
CVE-2020-15334P4MEDIUMCVSS 5.3v3.1.0v3.1.12022-09-29
CVE-2020-15334 [MEDIUM] CVE-2020-15334: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log/axxmpp
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log/axxmpp.log file.
nvd
CVE-2020-15338P4MEDIUMCVSS 5.3v3.1.0v3.1.12022-09-29
CVE-2020-15338 [MEDIUM] CWE-862 CVE-2020-15338: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Str
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /cnr requests.
nvd
CVE-2020-15333P4MEDIUMCVSS 5.3v3.1.0v3.1.12022-09-29
CVE-2020-15333 [MEDIUM] CWE-89 CVE-2020-15333: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL "select *
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL "select * from Administrator_users" and "select * from Users_users" requests.
nvd
CVE-2020-15325P4MEDIUMCVSS 5.3v3.1.0v3.1.12022-09-29
CVE-2020-15325 [MEDIUM] CWE-312 CVE-2020-15325: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication.
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication.
nvd
CVE-2020-15330P4MEDIUMCVSS 5.3v3.1.0v3.1.12022-09-29
CVE-2020-15330 [MEDIUM] CWE-311 CVE-2020-15330: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP_KEY in /opt/axess/etc/default/axess.
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP_KEY in /opt/axess/etc/default/axess.
nvd
CVE-2020-15339P4MEDIUMCVSS 6.1v3.1.0v3.1.12022-09-29
CVE-2020-15339 [MEDIUM] CWE-79 CVE-2020-15339: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handle_campaign_
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handle_campaign_script_link?script_name= XSS.
nvd
CVE-2020-15326P4MEDIUMCVSS 5.3v3.1.0v3.1.12022-09-29
CVE-2020-15326 [MEDIUM] CWE-798 CVE-2020-15326: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem.
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem.
nvd
CVE-2020-15328P4MEDIUMCVSS 5.3v3.1.0v3.1.12022-09-29
CVE-2020-15328 [MEDIUM] CWE-732 CVE-2020-15328: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions.
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions.
nvd
← Previous2 / 2