← All advisories

Critical severity9.8NVD Advisory· Published Jun 29, 2020· Updated Jun 17, 2026

CVE-2020-15324

CVE-2020-15324

Description

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_config.py file that stores hardcoded credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Zyxel/Cloudcnm Secumanager3 versions
cpe:2.3:a:zyxel:cloud_cnm_secumanager:3.1.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:zyxel:cloud_cnm_secumanager:3.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:zyxel:cloud_cnm_secumanager:3.1.1:*:*:*:*:*:*:*
- (no CPE)range: 3.1.0, 3.1.1
Zyxel/CloudCNM SecuManagerdescription

Patches

Vulnerability mechanics

References

2

pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.htmlnvdExploitTechnical DescriptionThird Party Advisory
www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.