PT-2020-14380 · Zyxel · Zyxel Cloudcnm Secumanager

Alexandre Torres + 1 · Published 2020-06-26 · Updated 2021-07-21 · CVE-2020-15348

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zyxel CloudCNM SecuManager versions 3.1.0 through 3.1.1

Description The issue allows for the injection of Python code through the "live/CPEManager/AXCampaignManager/delete cpes by ids" API endpoint, specifically by manipulating the cpe ids variable. This could potentially lead to unauthorized code execution.

Recommendations For versions 3.1.0 and 3.1.1, consider restricting access to the "live/CPEManager/AXCampaignManager/delete cpes by ids" API endpoint to minimize the risk of exploitation. Avoid using the cpe ids variable in the affected API endpoint until the issue is resolved.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2020-15348

Affected Products

Zyxel Cloudcnm Secumanager

References · 4

• 🔥 https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-15348 · Security Note
• https://zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15348 · Vendor Advisory