Medium · 6.5 CVE-2024-1575 EUVD-2024-17319GHSA-w52f-78r3-v89r

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an auth…

Published Jul 23, 2024 · Updated Aug 1, 2024 · Assigned by Zyxel

Vendor: Zyxel Product: WBE660S firmware Category: Network devices

Description

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.

Affected products

Vendor	Product	Affected	Fixed
Zyxel	WBE660S firmware	<= 6.70(ACGG.3)	—

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-07-23-2024 vendor-advisory