medium6.5
CVE-2024-1575
The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to es…
Impact
The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Nwa50ax Firmware | before 7.00\(abyw.1\) |
| Zyxel | Nwa50ax-Pro Firmware | before 7.00\(acge.1\) |
| Zyxel | Nwa55axe Firmware | before 7.00\(abzl.1\) |
| Zyxel | Nwa90ax Firmware | before 7.00\(accv.1\) |
| Zyxel | Nwa90ax-Pro Firmware | before 7.00\(acgf.1\) |
| Zyxel | Nwa110ax Firmware | before 7.00\(abtg.1\) |
| Zyxel | Nwa210ax Firmware | before 7.00\(abtd.1\) |
| Zyxel | Nwa220ax-6e Firmware | before 7.00\(acco.1\) |
| Zyxel | Nwa1123acv3 Firmware | before 6.70\(abvt.4\) |
| Zyxel | Wac500 Firmware | before 6.70\(abvs.4\) |
| Zyxel | Wac500h Firmware | before 6.70\(abwa.4\) |
| Zyxel | Wax300h Firmware | before 7.00\(achf.1\) |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-07-23-2024
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-07-23-2024