CVE-2024-1575CWE-269

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to…

Medium · published July 23, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00323 · 24.1th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-07-23T01:39Z
EPSS history
Timeline
  • 23 JUL 01:39Z
    The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to…
    cvelistv5