Skip to content
OpenAdvisories
High · 8.8 CVE-2024-12398 EUVD-2024-50823GHSA-29rw-7xhw-cxx2

An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) a…

Published Jan 14, 2025 · Updated Jan 14, 2025 · Assigned by Zyxel

Description

An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.

Affected products

VendorProductAffectedFixed
Zyxel WBE530 firmware <= 7.00(ACLE.3) —
Zyxel WBE660S firmware <= 6.70(ACGG.2) —

References