CVE-2020-15324

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmppconfig.py file that stores hardcoded credentials...

CVE-2020-15324

CVE-2020-15324 concerns Zyxel CloudCNM SecuManager versions 3.1.0 and 3.1.1. The issue arises from the file axess/opt/axXMPPHandler/config/xmpp_config.py being world-readable and containing hardcoded credentials. This linkage enables potential exposure of sensitive credentials stored within the c...

CVE-2020-15322

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account...

CVE-2020-15322

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 contain a hardcoded password for the debian-sys-maint account (wbboEZ4BN3ssxAfM). CVE-2020-15322 is corroborated by multiple sources (NVD, Red Hat, CNVD, CVE records) as a vulnerability with a hardcoded credential, enabling unauthorized access over the n...

CVE-2020-15312

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account...

CVE-2020-15314

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account...

CVE-2020-15313

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account...

CVE-2020-15314

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account...

Hardcoded credentials

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account...

Hardcoded credentials

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account...

Hardcoded credentials

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account...

CVE-2020-15319

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/mysql chroot directory tree...

CVE-2020-15318

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/mysql chroot directory tree...

CVE-2020-15318

CVE-2020-15318 affects Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1. The issue is a hardcoded DSA SSH key for the root account located in the /opt/mysql chroot directory tree, enabling potential unauthorized root access via SSH over the network and impacting confidentiality (per CVSS3.1 metrics). T...

CVE-2020-15317

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/axess chroot directory tree...

CVE-2020-15317

CVE-2020-15317 affects Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1, where a hardcoded RSA SSH key for the root account resides in the /opt/axess chroot directory tree. The available documents confirm the root-credential exposure issue but do not provide details on exploit scenarios, affected compo...

CVE-2020-15316

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account within the /opt/axess chroot directory tree...

CVE-2020-15316

CVE-2020-15316 affects Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1. The issue is a hardcoded ECDSA SSH key for the root account located in the /opt/axess chroot directory tree, as detailed across multiple sources (NVD, Red Hat advisory, CNVD, CVE records). This creates a potential for unauthorized...

CVE-2020-15315

CVE-2020-15315 affects ZyXEL CloudCNM SecuManager 3.1.0 and 3.1.1. The connected CNVD entry characterizes a trust-management issue and notes that attackers could exploit weak/default credentials, hard-coded passwords or certificates to compromise components. The CVE description specifies a hard-c...

CVE-2020-15312

CVE-2020-15312 affects Zyxel CloudCNM SecuManager versions 3.1.0 and 3.1.1. The root cause is a hardcoded DSA SSH key for the root account, enabling potential unauthorized root access via SSH. Metrics indicate a network exposure with high attack complexity and no user interaction, but with partia...