CVE-2024-12398

🗓️ 14 Jan 2025 01:39:04Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 91 Views

Improper privilege management in Zyxel WBE530 and WBE660S allows privilege escalation to admin.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability in the web interface for managing Zyxel network devices allows a perpetrator to escalate their privileges.	14 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-12398	14 Jan 202502:08	–	circl
CNNVD	Zyxel WBE530 安全漏洞	13 Jan 202500:00	–	cnnvd
Cvelist	CVE-2024-12398	14 Jan 202501:39	–	cvelist
EUVD	EUVD-2024-50823	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12398	14 Jan 202502:15	–	nvd
OSV	CVE-2024-12398	14 Jan 202502:15	–	osv
Positive Technologies	PT-2024-10082 · Zyxel · Zyxel Wbe530 +1	10 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-12398	5 Feb 202510:38	–	redhatcve
Vulnrichment	CVE-2024-12398	14 Jan 202501:39	–	vulnrichment

NVD

Node

zyxel nwa50ax_firmwareRange<7.10(abyw.1)

AND

zyxel nwa50axMatch-

Node

zyxel nwa50ax_pro_firmwareRange<7.10(acge.1)

AND

zyxel nwa50ax_proMatch-

Node

zyxel nwa55axe_firmwareRange<7.10(abzl.1)

AND

zyxel nwa55axeMatch-

Node

zyxel nwa90ax_firmwareRange<7.10(accv.1)

AND

zyxel nwa90axMatch-

Node

zyxel nwa90ax_pro_firmwareRange<7.10(acgf.1)

AND

zyxel nwa90ax_proMatch-

Node

zyxel nwa110ax_firmwareRange<7.10(abtg.1)

AND

zyxel nwa110axMatch-

Node

zyxel nwa130be_firmwareRange<7.10(acil.1)

AND

zyxel nwa130beMatch-

Node

zyxel nwa210ax_firmwareRange<7.10(abtd.1)

AND

zyxel nwa210axMatch-

Node

zyxel nwa220ax-6e_firmwareRange<7.10(acco.1)

AND

zyxel nwa220ax-6eMatch-

Node

zyxel nwa1123acv3_firmwareRange<6.70(abvt.6)

AND

zyxel nwa1123acv3Match-

Node

zyxel wac500_firmwareRange<6.70(abvs.6)

AND

zyxel wac500Match-

Node

zyxel wac500h_firmwareRange<6.70(abwa.6)

AND

zyxel wac500hMatch-

Node

zyxel wax300h_firmwareRange<7.10(achf.1)

AND

zyxel wax300hMatch-

Node

zyxel wax510d_firmwareRange<7.10(abtf.1)

AND

zyxel wax510dMatch-

Node

zyxel wax610d_firmwareRange<7.10(abte.1)

AND

zyxel wax610dMatch-

Node

zyxel wax620d-6e_firmwareRange<7.10(accn.1)

AND

zyxel wax620d-6eMatch-

Node

zyxel wax630s_firmwareRange<7.10(abzd.1)

AND

zyxel wax630sMatch-

Node

zyxel wax640s-6e_firmwareRange<7.10(accm.1)

AND

zyxel wax640s-6eMatch-

Node

zyxel wax650s_firmwareRange<7.10(abrm.1)

AND

zyxel wax650sMatch-

Node

zyxel wax655e_firmwareRange<7.10(acdo.1)

AND

zyxel wax655eMatch-

Node

zyxel wbe530_firmwareRange<7.10(acle.1)

AND

zyxel wbe530Match-

Node

zyxel wbe660s_firmwareRange<7.00(acgg.1)

AND

zyxel wbe660sMatch-

Node

zyxel usg_lite_60ax_firmwareRange<2.10(acip.0)

AND

zyxel usg_lite_60axMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "WBE530 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 7.00(ACLE.3)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WBE660S firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 6.70(ACGG.2)"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-and-security-router-devices-01-14-2025

17 Jun 2026 06:59Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18.8

EPSS0.00516

SSVC

CWE-269