CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2024-12398
High (8.8) in zyxel. EPSS 0.5% chance of exploitation in the next 30 days.
An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
- CWE
- CWE-269
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zyxel:nwa110ax_firmware
- zyxel:nwa1123acv3_firmware
- zyxel:nwa130be_firmware
- zyxel:nwa210ax_firmware
- zyxel:nwa220ax-6e_firmware
- zyxel:nwa50ax_firmware
- zyxel:nwa50ax_pro_firmware
- zyxel:nwa55axe_firmware
- zyxel:nwa90ax_firmware
- zyxel:nwa90ax_pro_firmware
- zyxel:usg_lite_60ax_firmware
- zyxel:wac500_firmware
- zyxel:wac500h_firmware
- zyxel:wax300h_firmware
- zyxel:wax510d_firmware
- zyxel:wax610d_firmware
- zyxel:wax620d-6e_firmware
- zyxel:wax630s_firmware
- zyxel:wax640s-6e_firmware
- zyxel:wax650s_firmware
- zyxel:wax655e_firmware
- zyxel:wbe530_firmware
- zyxel:wbe660s_firmware