CVE-2024-1575
The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Analyzed - security@zyxel.com.tw
- Published
- 2024-07-23
- Last modified
- 2024-08-01
- Weaknesses
- CWE-269
Affected products
- Nwa110ax Firmware (Zyxel)
- Nwa1123acv3 Firmware (Zyxel)
- Nwa210ax Firmware (Zyxel)
- Nwa220ax-6e Firmware (Zyxel)
- Nwa50ax-pro Firmware (Zyxel)
- Nwa50ax Firmware (Zyxel)
- Nwa55axe Firmware (Zyxel)
- Nwa90ax-pro Firmware (Zyxel)
- Nwa90ax Firmware (Zyxel)
- Wac500 Firmware (Zyxel)
- Wac500h Firmware (Zyxel)
- Wax300h Firmware (Zyxel)
- Wax510d Firmware (Zyxel)
- Wax610d Firmware (Zyxel)
- Wax620d-6e Firmware (Zyxel)
- Wax630s Firmware (Zyxel)
- Wax640s-6e Firmware (Zyxel)
- Wax650s Firmware (Zyxel)
- Wax655e Firmware (Zyxel)
- Wbe660s Firmware (Zyxel)
References
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-v…
