An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.
History

Tue, 21 Jan 2025 21:30:00 +0000

Type Values Removed Values Added
First Time appeared Zyxel
Zyxel nwa110ax
Zyxel nwa110ax Firmware
Zyxel nwa1123acv3
Zyxel nwa1123acv3 Firmware
Zyxel nwa130be
Zyxel nwa130be Firmware
Zyxel nwa210ax
Zyxel nwa210ax Firmware
Zyxel nwa220ax-6e
Zyxel nwa220ax-6e Firmware
Zyxel nwa50ax
Zyxel nwa50ax Firmware
Zyxel nwa50ax Pro
Zyxel nwa50ax Pro Firmware
Zyxel nwa55axe
Zyxel nwa55axe Firmware
Zyxel nwa90ax
Zyxel nwa90ax Firmware
Zyxel nwa90ax Pro
Zyxel nwa90ax Pro Firmware
Zyxel usg Lite 60ax
Zyxel usg Lite 60ax Firmware
Zyxel wac500
Zyxel wac500 Firmware
Zyxel wac500h
Zyxel wac500h Firmware
Zyxel wax300h
Zyxel wax300h Firmware
Zyxel wax510d
Zyxel wax510d Firmware
Zyxel wax610d
Zyxel wax610d Firmware
Zyxel wax620d-6e
Zyxel wax620d-6e Firmware
Zyxel wax630s
Zyxel wax630s Firmware
Zyxel wax640s-6e
Zyxel wax640s-6e Firmware
Zyxel wax650s
Zyxel wax650s Firmware
Zyxel wax655e
Zyxel wax655e Firmware
Zyxel wbe530
Zyxel wbe530 Firmware
Zyxel wbe660s
Zyxel wbe660s Firmware
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:h:zyxel:nwa110ax:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa1123acv3:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa130be:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa210ax:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa220ax-6e:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa50ax:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa50ax_pro:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa55axe:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa90ax:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa90ax_pro:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg_lite_60ax:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wac500:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wac500h:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax300h:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax510d:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax610d:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax620d-6e:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax630s:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax640s-6e:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax650s:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax655e:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wbe530:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wbe660s:-:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa110ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa1123acv3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa130be_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa210ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa220ax-6e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa50ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa50ax_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa55axe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa90ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa90ax_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:usg_lite_60ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wac500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wac500h_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax300h_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax510d_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax610d_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax620d-6e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax630s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax640s-6e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax650s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax655e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wbe530_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wbe660s_firmware:*:*:*:*:*:*:*:*
Vendors & Products Zyxel
Zyxel nwa110ax
Zyxel nwa110ax Firmware
Zyxel nwa1123acv3
Zyxel nwa1123acv3 Firmware
Zyxel nwa130be
Zyxel nwa130be Firmware
Zyxel nwa210ax
Zyxel nwa210ax Firmware
Zyxel nwa220ax-6e
Zyxel nwa220ax-6e Firmware
Zyxel nwa50ax
Zyxel nwa50ax Firmware
Zyxel nwa50ax Pro
Zyxel nwa50ax Pro Firmware
Zyxel nwa55axe
Zyxel nwa55axe Firmware
Zyxel nwa90ax
Zyxel nwa90ax Firmware
Zyxel nwa90ax Pro
Zyxel nwa90ax Pro Firmware
Zyxel usg Lite 60ax
Zyxel usg Lite 60ax Firmware
Zyxel wac500
Zyxel wac500 Firmware
Zyxel wac500h
Zyxel wac500h Firmware
Zyxel wax300h
Zyxel wax300h Firmware
Zyxel wax510d
Zyxel wax510d Firmware
Zyxel wax610d
Zyxel wax610d Firmware
Zyxel wax620d-6e
Zyxel wax620d-6e Firmware
Zyxel wax630s
Zyxel wax630s Firmware
Zyxel wax640s-6e
Zyxel wax640s-6e Firmware
Zyxel wax650s
Zyxel wax650s Firmware
Zyxel wax655e
Zyxel wax655e Firmware
Zyxel wbe530
Zyxel wbe530 Firmware
Zyxel wbe660s
Zyxel wbe660s Firmware

Tue, 14 Jan 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 14 Jan 2025 02:00:00 +0000

Type Values Removed Values Added
Description An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.
Weaknesses CWE-269
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Zyxel

Published:

Updated: 2025-01-14T15:26:24.681Z

Reserved: 2024-12-10T03:31:12.696Z

Link: CVE-2024-12398

cve-icon Vulnrichment

Updated: 2025-01-14T15:26:18.975Z

cve-icon NVD

Status : Analyzed

Published: 2025-01-14T02:15:07.990

Modified: 2025-01-21T21:12:02.310

Link: CVE-2024-12398

cve-icon Redhat

No data.