Filtered by vendor Zyxel Subscriptions
Filtered by product Cloud Cnm Secumanager Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-15348 1 Zyxel 1 Cloud Cnm Secumanager 2024-11-21 9.8 Critical
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager/delete_cpes_by_ids?cpe_ids= for eval injection of Python code.
CVE-2020-15324 1 Zyxel 1 Cloud Cnm Secumanager 2024-11-21 9.8 Critical
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_config.py file that stores hardcoded credentials.