CVE-2024-12398

🗓️ 14 Jan 2025 01:39:04Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 80 Views

Improper privilege management in Zyxel WBE530 and WBE660S allows privilege escalation to admin.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2024-12398	14 Jan 202502:08	–	circl
CNNVD	Zyxel WBE530 安全漏洞	13 Jan 202500:00	–	cnnvd
Cvelist	CVE-2024-12398	14 Jan 202501:39	–	cvelist
EUVD	EUVD-2024-50823	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12398	14 Jan 202502:15	–	nvd
Positive Technologies	PT-2024-10082 · Zyxel · Zyxel Wbe530 +1	10 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-12398	5 Feb 202510:38	–	redhatcve
Vulnrichment	CVE-2024-12398	14 Jan 202501:39	–	vulnrichment

NVD

Node

zyxel nwa50ax_firmwareRange<7.10(abyw.1)

AND

zyxel nwa50axMatch-

Node

zyxel nwa50ax_pro_firmwareRange<7.10(acge.1)

AND

zyxel nwa50ax_proMatch-

Node

zyxel nwa55axe_firmwareRange<7.10(abzl.1)

AND

zyxel nwa55axeMatch-

Node

zyxel nwa90ax_firmwareRange<7.10(accv.1)

AND

zyxel nwa90axMatch-

Node

zyxel nwa90ax_pro_firmwareRange<7.10(acgf.1)

AND

zyxel nwa90ax_proMatch-

Node

zyxel nwa110ax_firmwareRange<7.10(abtg.1)

AND

zyxel nwa110axMatch-

Node

zyxel nwa130be_firmwareRange<7.10(acil.1)

AND

zyxel nwa130beMatch-

Node

zyxel nwa210ax_firmwareRange<7.10(abtd.1)

AND

zyxel nwa210axMatch-

Node

zyxel nwa220ax-6e_firmwareRange<7.10(acco.1)

AND

zyxel nwa220ax-6eMatch-

Node

zyxel nwa1123acv3_firmwareRange<6.70(abvt.6)

AND

zyxel nwa1123acv3Match-

Node

zyxel wac500_firmwareRange<6.70(abvs.6)

AND

zyxel wac500Match-

Node

zyxel wac500h_firmwareRange<6.70(abwa.6)

AND

zyxel wac500hMatch-

Node

zyxel wax300h_firmwareRange<7.10(achf.1)

AND

zyxel wax300hMatch-

Node

zyxel wax510d_firmwareRange<7.10(abtf.1)

AND

zyxel wax510dMatch-

Node

zyxel wax610d_firmwareRange<7.10(abte.1)

AND

zyxel wax610dMatch-

Node

zyxel wax620d-6e_firmwareRange<7.10(accn.1)

AND

zyxel wax620d-6eMatch-

Node

zyxel wax630s_firmwareRange<7.10(abzd.1)

AND

zyxel wax630sMatch-

Node

zyxel wax640s-6e_firmwareRange<7.10(accm.1)

AND

zyxel wax640s-6eMatch-

Node

zyxel wax650s_firmwareRange<7.10(abrm.1)

AND

zyxel wax650sMatch-

Node

zyxel wax655e_firmwareRange<7.10(acdo.1)

AND

zyxel wax655eMatch-

Node

zyxel wbe530_firmwareRange<7.10(acle.1)

AND

zyxel wbe530Match-

Node

zyxel wbe660s_firmwareRange<7.00(acgg.1)

AND

zyxel wbe660sMatch-

Node

zyxel usg_lite_60ax_firmwareRange<2.10(acip.0)

AND

zyxel usg_lite_60axMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "WBE530 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 7.00(ACLE.3)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WBE660S firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 6.70(ACGG.2)"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-and-security-router-devices-01-14-2025

21 Jan 2025 21:12Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18.8

EPSS0.00461

SSVC

CWE-269