1. Home
  2. CVE Database
  3. CVE-2024-1575
MEDIUM · 6.5

CVE-2024-1575

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the config...

Vulnerability Description

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ZyxelNwa50Ax Firmware< 7.00\(abyw.1\)
ZyxelNwa50Ax-
ZyxelNwa50Ax-Pro Firmware< 7.00\(acge.1\)
ZyxelNwa50Ax-Pro-
ZyxelNwa55Axe Firmware< 7.00\(abzl.1\)
ZyxelNwa55Axe-
ZyxelNwa90Ax Firmware< 7.00\(accv.1\)
ZyxelNwa90Ax-
ZyxelNwa90Ax-Pro Firmware< 7.00\(acgf.1\)
ZyxelNwa90Ax-Pro-
ZyxelNwa110Ax Firmware< 7.00\(abtg.1\)
ZyxelNwa110Ax-
ZyxelNwa210Ax Firmware< 7.00\(abtd.1\)
ZyxelNwa210Ax-
ZyxelNwa220Ax-6E Firmware< 7.00\(acco.1\)
ZyxelNwa220Ax-6E-
ZyxelNwa1123Acv3 Firmware< 6.70\(abvt.4\)
ZyxelNwa1123Acv3-
ZyxelWac500 Firmware< 6.70\(abvs.4\)
ZyxelWac500-

Related Weaknesses (CWE)

CWE-269

References

FAQ

What is CVE-2024-1575?

CVE-2024-1575 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the config...

How severe is CVE-2024-1575?

CVE-2024-1575 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-1575?

Check the references section above for vendor advisories and patch information. Affected products include: Zyxel Nwa50Ax Firmware, Zyxel Nwa50Ax, Zyxel Nwa50Ax-Pro Firmware, Zyxel Nwa50Ax-Pro, Zyxel Nwa55Axe Firmware.