← Back

Cloud Cnm Secumanager

cloud_cnm_secumanager

Vendor: Zyxel • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Zyxel
1Cloud Cnm Secumanager
Nov 21, 2024
Jun 29, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_config.py file that stores hardcoded credentials.
1Zyxel
1Cloud Cnm Secumanager
Nov 21, 2024
Jun 26, 2020
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager/delete_cpes_by_ids?cpe_ids= for eval injection of Python code.