Zyxel: >> Cloud Cnm Secumanager Security Vulnerabilities
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_config.py file that stores hardcoded credentials.
CVSS Score
9.8
EPSS Score
0.005
Published
2020-06-29
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager/delete_cpes_by_ids?cpe_ids= for eval injection of Python code.
CVSS Score
9.8
EPSS Score
0.012
Published
2020-06-26