CVE-2020-15316

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account within the /opt/axess chroot directory tree...

CVE-2020-15315

CVE-2020-15315 affects ZyXEL CloudCNM SecuManager 3.1.0 and 3.1.1. The connected CNVD entry characterizes a trust-management issue and notes that attackers could exploit weak/default credentials, hard-coded passwords or certificates to compromise components. The CVE description specifies a hard-c...

CVE-2020-15315

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/axess chroot directory tree...

CVE-2020-15314

CVE-2020-15314 affects Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1. The vulnerability is caused by a hardcoded RSA SSH key for the root account, as confirmed by multiple connected sources (Red Hat, CNVD, NVD listings). This login credential issue enables potential unauthorized root access if an at...

CVE-2020-15314

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account...

CVE-2020-15313

CVE-2020-15313 affects Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1. The connected sources confirm a root‑level issue: a hardcoded ECDSA SSH key stored for the root account, creating a persistent authentication risk. Documented by NVD, Red Hat, CNVD, and CVE records, this is a configuration/credent...

CVE-2020-15313

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account...

CVE-2020-15312

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account...

CVE-2020-15312

CVE-2020-15312 affects Zyxel CloudCNM SecuManager versions 3.1.0 and 3.1.1. The root cause is a hardcoded DSA SSH key for the root account, enabling potential unauthorized root access via SSH. Metrics indicate a network exposure with high attack complexity and no user interaction, but with partia...

ZyXEL CloudCNM SecuManager Injection Vulnerability

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A security vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1. An attacker can exploi...

ZyXEL CloudCNM SecuManager Access Control Error Vulnerability

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A security vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1, which stems from the...

CVE-2020-15335

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests...

CVE-2020-15336

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests...

CVE-2020-15335

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests...

Authentication flaw

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests...

Authentication flaw

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests...

CVE-2020-15332

Zyxel CloudCNM SecuManager (versions 3.1.0–3.1.1) is affected by weak permissions on /opt/axess/etc/default/axess. The underlying issue is insecure permissioning that can enable unauthorized access to stored credentials. Some sources describe potential remote access consequences, emphasizing unen...

CVE-2020-15332

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions...

CVE-2020-15333

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL "select from Administratorusers" and "select from Usersusers" requests...

CVE-2020-15333

Zyxel CloudCNM SecuManager (versions 3.1.0 and 3.1.1) is impacted by an SQL injection vulnerability that allows an attacker to discover accounts via MySQL queries such as “select * from Administrator_users” and “select * from Users_users.” Root cause is insufficient protection of the SQL query st...