Description
An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.
Published: 2025-01-14
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-50823 An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.
History

Tue, 21 Jan 2025 21:30:00 +0000

Type Values Removed Values Added
First Time appeared Zyxel
Zyxel nwa110ax
Zyxel nwa110ax Firmware
Zyxel nwa1123acv3
Zyxel nwa1123acv3 Firmware
Zyxel nwa130be
Zyxel nwa130be Firmware
Zyxel nwa210ax
Zyxel nwa210ax Firmware
Zyxel nwa220ax-6e
Zyxel nwa220ax-6e Firmware
Zyxel nwa50ax
Zyxel nwa50ax Firmware
Zyxel nwa50ax Pro
Zyxel nwa50ax Pro Firmware
Zyxel nwa55axe
Zyxel nwa55axe Firmware
Zyxel nwa90ax
Zyxel nwa90ax Firmware
Zyxel nwa90ax Pro
Zyxel nwa90ax Pro Firmware
Zyxel usg Lite 60ax
Zyxel usg Lite 60ax Firmware
Zyxel wac500
Zyxel wac500 Firmware
Zyxel wac500h
Zyxel wac500h Firmware
Zyxel wax300h
Zyxel wax300h Firmware
Zyxel wax510d
Zyxel wax510d Firmware
Zyxel wax610d
Zyxel wax610d Firmware
Zyxel wax620d-6e
Zyxel wax620d-6e Firmware
Zyxel wax630s
Zyxel wax630s Firmware
Zyxel wax640s-6e
Zyxel wax640s-6e Firmware
Zyxel wax650s
Zyxel wax650s Firmware
Zyxel wax655e
Zyxel wax655e Firmware
Zyxel wbe530
Zyxel wbe530 Firmware
Zyxel wbe660s
Zyxel wbe660s Firmware
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:h:zyxel:nwa110ax:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa1123acv3:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa130be:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa210ax:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa220ax-6e:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa50ax:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa50ax_pro:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa55axe:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa90ax:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:nwa90ax_pro:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:usg_lite_60ax:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wac500:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wac500h:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax300h:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax510d:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax610d:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax620d-6e:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax630s:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax640s-6e:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax650s:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wax655e:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wbe530:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:wbe660s:-:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa110ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa1123acv3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa130be_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa210ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa220ax-6e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa50ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa50ax_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa55axe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa90ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:nwa90ax_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:usg_lite_60ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wac500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wac500h_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax300h_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax510d_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax610d_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax620d-6e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax630s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax640s-6e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax650s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wax655e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wbe530_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:wbe660s_firmware:*:*:*:*:*:*:*:*
Vendors & Products Zyxel
Zyxel nwa110ax
Zyxel nwa110ax Firmware
Zyxel nwa1123acv3
Zyxel nwa1123acv3 Firmware
Zyxel nwa130be
Zyxel nwa130be Firmware
Zyxel nwa210ax
Zyxel nwa210ax Firmware
Zyxel nwa220ax-6e
Zyxel nwa220ax-6e Firmware
Zyxel nwa50ax
Zyxel nwa50ax Firmware
Zyxel nwa50ax Pro
Zyxel nwa50ax Pro Firmware
Zyxel nwa55axe
Zyxel nwa55axe Firmware
Zyxel nwa90ax
Zyxel nwa90ax Firmware
Zyxel nwa90ax Pro
Zyxel nwa90ax Pro Firmware
Zyxel usg Lite 60ax
Zyxel usg Lite 60ax Firmware
Zyxel wac500
Zyxel wac500 Firmware
Zyxel wac500h
Zyxel wac500h Firmware
Zyxel wax300h
Zyxel wax300h Firmware
Zyxel wax510d
Zyxel wax510d Firmware
Zyxel wax610d
Zyxel wax610d Firmware
Zyxel wax620d-6e
Zyxel wax620d-6e Firmware
Zyxel wax630s
Zyxel wax630s Firmware
Zyxel wax640s-6e
Zyxel wax640s-6e Firmware
Zyxel wax650s
Zyxel wax650s Firmware
Zyxel wax655e
Zyxel wax655e Firmware
Zyxel wbe530
Zyxel wbe530 Firmware
Zyxel wbe660s
Zyxel wbe660s Firmware

Tue, 14 Jan 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 14 Jan 2025 02:00:00 +0000

Type Values Removed Values Added
Description An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.
Weaknesses CWE-269
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


Subscriptions

Zyxel Nwa110ax Nwa110ax Firmware Nwa1123acv3 Nwa1123acv3 Firmware Nwa130be Nwa130be Firmware Nwa210ax Nwa210ax Firmware Nwa220ax-6e Nwa220ax-6e Firmware Nwa50ax Nwa50ax Firmware Nwa50ax Pro Nwa50ax Pro Firmware Nwa55axe Nwa55axe Firmware Nwa90ax Nwa90ax Firmware Nwa90ax Pro Nwa90ax Pro Firmware Usg Lite 60ax Usg Lite 60ax Firmware Wac500 Wac500 Firmware Wac500h Wac500h Firmware Wax300h Wax300h Firmware Wax510d Wax510d Firmware Wax610d Wax610d Firmware Wax620d-6e Wax620d-6e Firmware Wax630s Wax630s Firmware Wax640s-6e Wax640s-6e Firmware Wax650s Wax650s Firmware Wax655e Wax655e Firmware Wbe530 Wbe530 Firmware Wbe660s Wbe660s Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: Zyxel

Published:

Updated: 2025-01-14T15:26:24.681Z

Reserved: 2024-12-10T03:31:12.696Z

Link: CVE-2024-12398

cve-icon Vulnrichment

Updated: 2025-01-14T15:26:18.975Z

cve-icon NVD

Status : Analyzed

Published: 2025-01-14T02:15:07.990

Modified: 2025-01-21T21:12:02.310

Link: CVE-2024-12398

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses