Privilege escalation

2023-11-2802:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

zyxel atp

usg flex

privilege escalation

debug cli command

firmware

local attacker

system files

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access system files on an affected device.

CPENameOperatorVersion
nwa110ax_firmwareeq< 6.70abtg.0
nwa1123acv3_firmwareeq< 6.70abvt.0
nwa210ax_firmwareeq< 6.70abtd.0
nwa220ax-6e_firmwareeq< 6.70acco.0
nwa50ax-pro_firmwareeq< 6.80acge.0
nwa50ax_firmwareeq< 6.80abyw.0
nwa55axe_firmwareeq< 6.80abzl.0
nwa90ax-pro_firmwareeq< 6.80acgf.0
nwa90ax_firmwareeq< 6.80accv.0
wac500_firmwareeq< 6.70abvs.0

Name	Operator	Version
nwa110ax_firmware	eq	< 6.70abtg.0
nwa1123acv3_firmware	eq	< 6.70abvt.0
nwa210ax_firmware	eq	< 6.70abtd.0
nwa220ax-6e_firmware	eq	< 6.70acco.0
nwa50ax-pro_firmware	eq	< 6.80acge.0
nwa50ax_firmware	eq	< 6.80abyw.0
nwa55axe_firmware	eq	< 6.80abzl.0
nwa90ax-pro_firmware	eq	< 6.80acgf.0
nwa90ax_firmware	eq	< 6.80accv.0
wac500_firmware	eq	< 6.70abvs.0