Zyxel Cloud Cnm Secumanager
2 CVEs affecting Zyxel Cloud Cnm Secumanager. Latest disclosed: 2020-06-29. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-15324 | Critical | 9.8 | 2020-06-29 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_config.py file that stores hardcoded credentials. |
CVE-2020-15348 | Critical | 9.8 | 2020-06-26 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager/delete_cpes_by_ids?cpe_ids= for eval injection of Python code. |