zyxel Vulnerability Advisory Catalog

Total 308 security vulnerabilities recorded for zyxel software and firmware.

← Back to All Vendors
CVE-2020-15321 CRITICAL
Component: cloudcnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account....

📅 2020-06-29
CVSS 9.8 Dossier →
CVE-2020-15320 CRITICAL
Component: cloudcnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account....

📅 2020-06-29
CVSS 9.8 Dossier →
Component: cloudcnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/mysql chroot directory tree....

📅 2020-06-29
CVSS 5.9 Dossier →
Component: cloudcnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/mysql chroot directory tree....

📅 2020-06-29
CVSS 5.9 Dossier →
Component: cloudcnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/axess chroot directory tree....

📅 2020-06-29
CVSS 5.9 Dossier →
Component: cloudcnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account within the /opt/axess chroot directory tree....

📅 2020-06-29
CVSS 5.9 Dossier →
Component: cloudcnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/axess chroot directory tree....

📅 2020-06-29
CVSS 5.9 Dossier →
Component: cloudcnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account....

📅 2020-06-29
CVSS 5.9 Dossier →
Component: cloudcnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account....

📅 2020-06-29
CVSS 5.9 Dossier →
Component: cloudcnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account....

📅 2020-06-29
CVSS 5.9 Dossier →
Component: cloudcnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests....

📅 2020-06-26
CVSS 7.5 Dossier →
Component: cloudcnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests....

📅 2020-06-26
CVSS 7.5 Dossier →
CVE-2020-15348 CRITICAL
Component: cloud_cnm_secumanager

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager/delete_cpes_by_ids?cpe_ids= for eval injection of Python co...

📅 2020-06-26
CVSS 9.8 Dossier →
Component: wap6806_firmware

Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI....

📅 2020-06-22
CVSS 8.6 Dossier →
Component: xgs2210-52hp_firmware

In firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site scripting (XSS) issues allows remote authenticated users to inject arbitrar...

📅 2020-03-31
CVSS 5.4 Dossier →
CVE-2020-9054 CRITICAL
Component: nas326_firmware

Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, whic...

📅 2020-03-04
CVSS 9.8 Dossier →
Component: gs1900-8_firmware

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. By sending a signal to the CLI process, undocumented functionalit...

📅 2019-11-14
CVSS 7.5 Dossier →
CVE-2019-15803 CRITICAL
Component: gs1900-8_firmware

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Through an undocumented sequence of keypresses, undocumented func...

📅 2019-11-14
CVSS 9.1 Dossier →
Component: gs1900-8_firmware

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware hashes and encrypts passwords using a hardcoded cryp...

📅 2019-11-14
CVSS 5.9 Dossier →
Component: gs1900-8_firmware

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware image contains encrypted passwords that are used to ...

📅 2019-11-14
CVSS 7.5 Dossier →
CVE-2019-15800 CRITICAL
Component: gs1900-8_firmware

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Due to lack of input validation in the cmd_sys_traceroute_exec(),...

📅 2019-11-14
CVSS 9.8 Dossier →
Component: gs1900-8_firmware

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. User accounts created through the web interface of the device, wh...

📅 2019-11-14
CVSS 8.8 Dossier →
Component: 2.00\(abbx.3\)

ZyXEL P-1302-T10D v3 devices with firmware version 2.00(ABBX.3) and earlier do not properly enforce access control and could allow an unauthorized use...

📅 2019-11-12
CVSS 6.5 Dossier →
CVE-2019-17354 CRITICAL
Component: nbg-418n_v2_firmware

wan.htm page on Zyxel NBG-418N v2 with firmware version V1.00(AARP.9)C0 can be accessed directly without authentication, which can lead to disclosure ...

📅 2019-10-09
CVSS 9.4 Dossier →
Page 9 of 13 (308 Total Records)