CVE-2020-15336

Name of the Vulnerable Software and Affected Versions Zyxel CloudCNM SecuManager versions 3.1.0 through 3.1.1

Description The issue concerns a lack of authentication for "/cnr" requests. This means that the "/cnr" API endpoint does not require authentication, potentially allowing unauthorized access.

Recommendations For versions 3.1.0 and 3.1.1, consider restricting access to the "/cnr" API endpoint until a fix is available. As a temporary workaround, avoid using the "/cnr" requests in the affected Zyxel CloudCNM SecuManager versions until the issue is resolved.