VulnerabilityAnalyzed
CVE-2024-1575
The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.
MEDIUM 6.5EPSS 0.32%
Does this matter?
Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own.
Description
The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.32% probability · 25th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-269
- Affected
- zyxel/nwa50ax firmware · zyxel/nwa50ax-pro firmware · zyxel/nwa55axe firmware · zyxel/nwa90ax firmware · zyxel/nwa90ax-pro firmware · zyxel/nwa110ax firmware · zyxel/nwa210ax firmware · zyxel/nwa220ax-6e firmware · zyxel/nwa1123acv3 firmware · zyxel/wac500 firmware · zyxel/wac500h firmware · zyxel/wax300h firmware · zyxel/wax510d firmware · zyxel/wax610d firmware · zyxel/wax620d-6e firmware · zyxel/wax630s firmware · zyxel/wax640s-6e firmware · zyxel/wax650s firmware · zyxel/wax655e firmware · zyxel/wbe660s firmware
- Source
- security@zyxel.com.tw
References
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-07-23-2024Vendor Advisory
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-07-23-2024Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.