CVE-2020-15337

Mô tả

Tham khảo

• pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html · Exploit
• zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml · Vendor Advisory

Lỗ hổng khác của cloudcnm secumanager

• CVE-2020-15347NGHIÊM TRỌNG 9.8Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account.
• CVE-2020-15346TRUNG BÌNH 5.3Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key.
• CVE-2020-15345TRUNG BÌNH 5.3Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_instances_for_update API.
• CVE-2020-15344TRUNG BÌNH 5.3Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API.
• CVE-2020-15343TRUNG BÌNH 5.3Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API.