CVE-2020-15321

CVE-2020-15321 concerns Zyxel CloudCNM SecuManager versions 3.1.0 and 3.1.1, which contain a hard-coded backdoor account (username: livedbuser, password: axzyxel). The root cause is an embedded credential that enables a remote attacker to authenticate as livedbuser, potentially leading to unautho...