294 matches found
Default credentials
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account...
CVE-2020-15324
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmppconfig.py file that stores hardcoded credentials...
CVE-2020-15324
CVE-2020-15324 concerns Zyxel CloudCNM SecuManager versions 3.1.0 and 3.1.1. The issue arises from the file axess/opt/axXMPPHandler/config/xmpp_config.py being world-readable and containing hardcoded credentials. This linkage enables potential exposure of sensitive credentials stored within the c...
CVE-2020-15323
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account default credentials...
CVE-2020-15323
CVE-2020-15323 affects Zyxel CloudCNM SecuManager versions 3.1.0 and 3.1.1. The root cause is a default hard-coded account (a1@chopin) with password cloud1234, enabling remote authentication and unauthorized access. NVD rates CVSSv3.1 as 9.8 (CRITICAL) and CVSSv2 as 7.5 (HIGH), indicating high-im...
CVE-2020-15322
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 contain a hardcoded password for the debian-sys-maint account (wbboEZ4BN3ssxAfM). CVE-2020-15322 is corroborated by multiple sources (NVD, Red Hat, CNVD, CVE records) as a vulnerability with a hardcoded credential, enabling unauthorized access over the n...
CVE-2020-15322
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account...
CVE-2020-15321
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account...
CVE-2020-15321
CVE-2020-15321 concerns Zyxel CloudCNM SecuManager versions 3.1.0 and 3.1.1, which contain a hard-coded backdoor account (username: livedbuser, password: axzyxel). The root cause is an embedded credential that enables a remote attacker to authenticate as livedbuser, potentially leading to unautho...
CVE-2020-15320
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account...
CVE-2020-15320
Affected product: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1. Root access issue: axiros password configured for the root account, enabling remote attackers to gain full control. Public records cite remote root compromise; exploitation details are not provided in the supplied sources. Remediation:...
CVE-2020-15312
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account...
CVE-2020-15313
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account...
CVE-2020-15314
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account...
CVE-2020-15314
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account...
CVE-2020-15312
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account...
CVE-2020-15313
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account...
Hardcoded credentials
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account...