CVE-2024-1575

published 2024-07-23

CVE-2024-1575: The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to…

Priority P3 38 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.

Affected

21 ranges

Vendor	Product	Version range	Fixed in
zyxel	nwa110ax_firmware	< 7.00\(abtg.1\)	7.00\(abtg.1\)
zyxel	nwa1123acv3_firmware	< 6.70\(abvt.4\)	6.70\(abvt.4\)
zyxel	nwa210ax_firmware	< 7.00\(abtd.1\)	7.00\(abtd.1\)
zyxel	nwa220ax-6e_firmware	< 7.00\(acco.1\)	7.00\(acco.1\)
zyxel	nwa50ax-pro_firmware	< 7.00\(acge.1\)	7.00\(acge.1\)
zyxel	nwa50ax_firmware	< 7.00\(abyw.1\)	7.00\(abyw.1\)
zyxel	nwa55axe_firmware	< 7.00\(abzl.1\)	7.00\(abzl.1\)
zyxel	nwa90ax-pro_firmware	< 7.00\(acgf.1\)	7.00\(acgf.1\)
zyxel	nwa90ax_firmware	< 7.00\(accv.1\)	7.00\(accv.1\)
zyxel	wac500_firmware	< 6.70\(abvs.4\)	6.70\(abvs.4\)
zyxel	wac500h_firmware	< 6.70\(abwa.4\)	6.70\(abwa.4\)
zyxel	wax300h_firmware	< 7.00\(achf.1\)	7.00\(achf.1\)
zyxel	wax510d_firmware	< 7.00\(abtf.1\)	7.00\(abtf.1\)
zyxel	wax610d_firmware	< 7.00\(abte.1\)	7.00\(abte.1\)
zyxel	wax620d-6e_firmware	< 7.00\(accn.1\)	7.00\(accn.1\)
zyxel	wax630s_firmware	< 7.00\(abzd.1\)	7.00\(abzd.1\)
zyxel	wax640s-6e_firmware	< 7.00\(accm.1\)	7.00\(accm.1\)
zyxel	wax650s_firmware	< 7.00\(abrm.1\)	7.00\(abrm.1\)
zyxel	wax655e_firmware	< 7.00\(acdo.1\)	7.00\(acdo.1\)
zyxel	wbe660s_firmware	< 7.00\(acgg.1\)	7.00\(acgg.1\)
zyxel	wbe660s_firmware	<= 6.70(ACGG.3)	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269