CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2024-1575
Medium (6.5) in zyxel. EPSS 0.3% chance of exploitation in the next 30 days.
The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
- CWE
- CWE-269
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zyxel:nwa110ax_firmware
- zyxel:nwa1123acv3_firmware
- zyxel:nwa210ax_firmware
- zyxel:nwa220ax-6e_firmware
- zyxel:nwa50ax-pro_firmware
- zyxel:nwa50ax_firmware
- zyxel:nwa55axe_firmware
- zyxel:nwa90ax-pro_firmware
- zyxel:nwa90ax_firmware
- zyxel:wac500_firmware
- zyxel:wac500h_firmware
- zyxel:wax300h_firmware
- zyxel:wax510d_firmware
- zyxel:wax610d_firmware
- zyxel:wax620d-6e_firmware
- zyxel:wax630s_firmware
- zyxel:wax640s-6e_firmware
- zyxel:wax650s_firmware
- zyxel:wax655e_firmware
- zyxel:wbe660s_firmware