Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests.
References
Link | Resource |
---|---|
https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html#xmpp-no-auth-cleartext | Third Party Advisory |
https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Jul 2022, 12:44
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html#xmpp-no-auth-cleartext - Third Party Advisory |
Information
Published : 2020-06-26 15:15
Updated : 2024-02-04 21:00
NVD link : CVE-2020-15335
Mitre link : CVE-2020-15335
CVE.ORG link : CVE-2020-15335
JSON object : View
Products Affected
zyxel
- cloudcnm_secumanager
CWE
CWE-306
Missing Authentication for Critical Function