Known Vulnerabilities for Cloudcnm Secumanager by Zyxel
Listed below are 10 of the newest known vulnerabilities associated with "Cloudcnm Secumanager" by "Zyxel".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-15347 json | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account. | 9.8 - CRITICAL | 2022-09-29 | 2022-10-27 |
| CVE-2020-15346 json | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key. | 5.3 - MEDIUM | 2022-09-29 | 2022-10-27 |
| CVE-2020-15345 json | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_instances_for_update API. | 5.3 - MEDIUM | 2022-09-29 | 2022-10-27 |
| CVE-2020-15344 json | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API. | 5.3 - MEDIUM | 2022-09-29 | 2022-10-27 |
| CVE-2020-15343 json | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API. | 5.3 - MEDIUM | 2022-09-29 | 2022-10-27 |
| CVE-2020-15342 json | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user API. | 5.3 - MEDIUM | 2022-09-29 | 2022-10-27 |
| CVE-2020-15341 json | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API. | 7.5 - HIGH | 2022-09-29 | 2022-10-27 |
| CVE-2020-15340 json | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess/TR69/Handlers/turbolink/ssh... | 7.5 - HIGH | 2022-09-29 | 2022-10-27 |
| CVE-2020-15339 json | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handle_campaign_script_link?script_name= ... | 6.1 - MEDIUM | 2022-09-29 | 2022-10-27 |
| CVE-2020-15338 json | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /cnr requ... | 5.3 - MEDIUM | 2022-09-29 | 2022-10-27 |