CVE-2024-12398 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware v…
High CVSS: 8.8

CVE-2024-12398

An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.
Vendor
Zyxel
Product
Nwa50ax Firmware
CWE
CWE-269
Yayın Tarihi
2025-01-14 02:15:07
Güncelleme
2025-01-21 21:12:02
Source Identifier
security@zyxel.com.tw
KEV Date Added
-

Kategoriler

CWE-269 Nwa50ax Firmware HIGH Zyxel 2025

Referanslar

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-and-security-router-devices-01-14-2025