CVE-2020-15336

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests...

CVE-2020-15336

Zyxel CloudCNM SecuManager (3.1.0 and 3.1.1) exposes /cnr endpoints without authentication, enabling unauthorized access. Red Hat and CNVD/CVE listings concur on an authentication bypass affecting these versions. The CVSS details indicate network-accessible, unauthenticated access with high integ...