PT-2020-14380

Name of the Vulnerable Software and Affected Versions Zyxel CloudCNM SecuManager versions 3.1.0 through 3.1.1 Description The issue allows for the injection of Python code through the "live/CPEManager/AXCampaignManager/delete cpes by ids" API endpoint, specifically by manipulating the cpe ids...

ZyXEL Cloud CNM SecuManager Unauthorized Remote Code Execution Vulnerability

Zyxel Cloud CNM SecuManager is a full-featured network management software that provides an integrated console to monitor and manage security grids, including the ZyWALLUSG and VPN series. An unauthorized remote code execution vulnerability exists in Zyxel Cloud CNM SecuManager, which can be...