Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions.
zyxel cloudcnm secumanager 3.1.0
zyxel cloudcnm secumanager 3.1.1