VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

402,579 vulnerabilities · 1,766 actively exploited (CISA KEV)

zyxel ✕Clear filters

39 results

ID	Severity	Summary	Published
CVE-2020-15326	MEDIUM5.3	Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem.	29/09/2022
CVE-2020-15325	MEDIUM5.3	Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication.	29/09/2022
CVE-2022-0556	HIGH7.8	A local privilege escalation vulnerability caused by incorrect permission assignment in some directories of the Zyxel AP Configurator (ZAC) version 1.1.4, which could allow an attacker to execute arbitrary code as a local administrator.	11/04/2022
CVE-2020-15324	CRITICAL9.8	Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_config.py file that stores hardcoded credentials.