CVE-2024-1575 | THREATINT

Description

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.

Reserved 2024-02-16 | Published 2024-07-23 | Updated 2024-08-01 | Assigner Zyxel

MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-269 Improper Privilege Management

Product status

Default status

unaffected

<= 6.70(ACGG.3)

affected

References

www.zyxel.com/...-management-vulnerability-in-aps-07-23-2024 vendor-advisory

cve.org (CVE-2024-1575)

nvd.nist.gov (CVE-2024-1575)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase

Subscribe to our newsletter to learn more about our work.