CVE-2024-1575
MEDIUMDescription
The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.
Is your site exposed to CVE-2024-1575?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| zyxel | nwa50ax_firmware |
| zyxel | nwa50ax |
| zyxel | nwa50ax-pro_firmware |
| zyxel | nwa50ax-pro |
| zyxel | nwa55axe_firmware |
| zyxel | nwa55axe |
| zyxel | nwa90ax_firmware |
| zyxel | nwa90ax |
| zyxel | nwa90ax-pro_firmware |
| zyxel | nwa90ax-pro |
| zyxel | nwa110ax_firmware |
| zyxel | nwa110ax |
| zyxel | nwa210ax_firmware |
| zyxel | nwa210ax |
| zyxel | nwa220ax-6e_firmware |
| zyxel | nwa220ax-6e |
| zyxel | nwa1123acv3_firmware |
| zyxel | nwa1123acv3 |
| zyxel | wac500_firmware |
| zyxel | wac500 |
| zyxel | wac500h_firmware |
| zyxel | wac500h |
| zyxel | wax300h_firmware |
| zyxel | wax300h |
| zyxel | wax510d_firmware |
| zyxel | wax510d |
| zyxel | wax610d_firmware |
| zyxel | wax610d |
| zyxel | wax620d-6e_firmware |
| zyxel | wax620d-6e |
| zyxel | wax630s_firmware |
| zyxel | wax630s |
| zyxel | wax640s-6e_firmware |
| zyxel | wax640s-6e |
| zyxel | wax650s_firmware |
| zyxel | wax650s |
| zyxel | wax655e_firmware |
| zyxel | wax655e |
| zyxel | wbe660s_firmware |
| zyxel | wbe660s |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-1575? +
How severe is CVE-2024-1575? +
What products are affected by CVE-2024-1575? +
How do I check if I'm vulnerable to CVE-2024-1575? +
Related Vulnerabilities
A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a …
NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom …
Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user.
Improper Privilege Management (CWE-269) in `/usr/bin/ltsudo` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on …
PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a …
A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated user to perform actions …