Hardcoded credentials

2020-06-2916:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.7%

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_config.py file that stores hardcoded credentials.

CPENameOperatorVersion
cloud_cnm_secumanagereq3.1.1
cloud_cnm_secumanagereq3.1.0

CPE	Name	Operator	Version
	cloud_cnm_secumanager	eq	3.1.1
	cloud_cnm_secumanager	eq	3.1.0

References

pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html

www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml