CVE-2020-15340: Zyxel Cloudcnm Secumanager

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess/TR69/Handlers/turbolink/sshkeys/id_rsa SSH key.

Affected products

• Zyxel Cloudcnm Secumanager: version 3.1.0 only; version 3.1.1 only

Published 2022-09-29. Last modified 2026-06-17.