CVE-2020-15333

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL "select from Administratorusers" and "select from Usersusers" requests...

CVE-2020-15333

Zyxel CloudCNM SecuManager (versions 3.1.0 and 3.1.1) is impacted by an SQL injection vulnerability that allows an attacker to discover accounts via MySQL queries such as “select * from Administrator_users” and “select * from Users_users.” Root cause is insufficient protection of the SQL query st...