CVE-2024-1575

🗓️ 23 Jul 2024 01:39:53Reported by ZyxelType

Improper privilege management vulnerability in Zyxel WBE660S firmwar

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of Zyxel network device microprogramming software, related to deficiencies in access control, allows attackers to enhance their privileges and upload arbitrary configuration files.	31 Jul 202400:00	–	bdu_fstec
Circl	CVE-2024-1575	23 Jul 202404:42	–	circl
CNNVD	Zyxel WBE660S 安全漏洞	23 Jul 202400:00	–	cnnvd
Cvelist	CVE-2024-1575	23 Jul 202401:39	–	cvelist
EUVD	EUVD-2024-17319	3 Oct 202520:07	–	euvd
NVD	CVE-2024-1575	23 Jul 202402:15	–	nvd
OSV	CVE-2024-1575	23 Jul 202402:15	–	osv
Positive Technologies	PT-2024-5288 · Zyxel · Zyxel Wbe660S	16 Feb 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-1575: Improper Privilege Management	23 Jul 202400:00	–	rapid7
RedhatCVE	CVE-2024-1575	23 May 202506:42	–	redhatcve

NVD

Node

AND

zyxel nwa50ax_firmwareRange<7.00(abyw.1)

zyxel nwa50axMatch-

Node

AND

zyxel nwa50ax-pro_firmwareRange<7.00(acge.1)

zyxel nwa50ax-proMatch-

Node

AND

zyxel nwa55axe_firmwareRange<7.00(abzl.1)

zyxel nwa55axeMatch-

Node

AND

zyxel nwa90ax_firmwareRange<7.00(accv.1)

zyxel nwa90axMatch-

Node

AND

zyxel nwa90ax-pro_firmwareRange<7.00(acgf.1)

zyxel nwa90ax-proMatch-

Node

AND

zyxel nwa110ax_firmwareRange<7.00(abtg.1)

zyxel nwa110axMatch-

Node

AND

zyxel nwa210ax_firmwareRange<7.00(abtd.1)

zyxel nwa210axMatch-

Node

AND

zyxel nwa220ax-6e_firmwareRange<7.00(acco.1)

zyxel nwa220ax-6eMatch-

Node

AND

zyxel nwa1123acv3_firmwareRange<6.70(abvt.4)

zyxel nwa1123acv3Match-

Node

AND

zyxel wac500_firmwareRange<6.70(abvs.4)

zyxel wac500Match-

Node

AND

zyxel wac500h_firmwareRange<6.70(abwa.4)

zyxel wac500hMatch-

Node

AND

zyxel wax300h_firmwareRange<7.00(achf.1)

zyxel wax300hMatch-

Node

AND

zyxel wax510d_firmwareRange<7.00(abtf.1)

zyxel wax510dMatch-

Node

AND

zyxel wax610d_firmwareRange<7.00(abte.1)

zyxel wax610dMatch-

Node

AND

zyxel wax620d-6e_firmwareRange<7.00(accn.1)

zyxel wax620d-6eMatch-

Node

AND

zyxel wax630s_firmwareRange<7.00(abzd.1)

zyxel wax630sMatch-

Node

AND

zyxel wax640s-6e_firmwareRange<7.00(accm.1)

zyxel wax640s-6eMatch-

Node

AND

zyxel wax650s_firmwareRange<7.00(abrm.1)

zyxel wax650sMatch-

Node

AND

zyxel wax655e_firmwareRange<7.00(acdo.1)

zyxel wax655eMatch-

Node

AND

zyxel wbe660s_firmwareRange<7.00(acgg.1)

zyxel wbe660sMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "WBE660S firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 6.70(ACGG.3)"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-07-23-2024

17 Jun 2026 07:04Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.5

EPSS0.00323

SSVC

CWE-269