CVE-2024-1575 | THREATINT

Assigner	Zyxel
Reserved	2024-02-16
Published	2024-07-23
Updated	2024-08-01

Description

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.

MEDIUM: 6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-269 Improper Privilege Management

Product status

Default status

unaffected

<= 6.70(ACGG.3)

affected

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-07-23-2024 vendor-advisory

cve.org CVE-2024-1575

nvd.nist.gov CVE-2024-1575

Download JSON

https://cve.threatint.com

Subscribe to our newsletter to learn more about our work.