Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-15321 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account. | Critical (9.8) | 2020-06-29 | Environment Specific |
| CVE-2020-15320 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account. | Critical (9.8) | 2020-06-29 | Environment Specific |
| CVE-2020-2021 | When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificat… | Critical (10.0) | 2020-06-29 | Environment Specific |
| CVE-2020-15313 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account. | Medium (5.9) | 2020-06-29 | Environment Specific |
| CVE-2020-15312 | Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account. | Medium (5.9) | 2020-06-29 | Environment Specific |