CVE-2024-41720

2024-08-0505:15:39

CWE-732

[email protected]

web.nvd.nist.gov

security

permission

firmware

vulnerability

network-adjacent

attacker

configuration

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

9.4%

JSON

Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15, which may allow a network-adjacent authenticated attacker to alter the configuration of the device.

Affected configurations

Nvd

Node

zexelonzwx-2000csw2-hn_firmwareRange<0.3.15

AND

zexelonzwx-2000csw2-hn

VendorProductVersionCPE
zexelonzwx-2000csw2-hn_firmware*cpe:2.3:o:zexelon:zwx-2000csw2-hn_firmware:*:*:*:*:*:*:*:*
zexelonzwx-2000csw2-hn*cpe:2.3:h:zexelon:zwx-2000csw2-hn:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zexelon	zwx-2000csw2-hn_firmware	*	cpe:2.3:o:zexelon:zwx-2000csw2-hn_firmware::::::::
zexelon	zwx-2000csw2-hn	*	cpe:2.3:h:zexelon:zwx-2000csw2-hn::::::::