Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cloudcnm_secumanager | Zyxel | 3.1.0 (including) | 3.1.0 (including) |
| Cloudcnm_secumanager | Zyxel | 3.1.1 (including) | 3.1.1 (including) |