CVE-2024-12398highCWE-269

CVE-2024-12398: high-severity vulnerability in Zyxel WBE530 firmware

Published

Follow this CVE+ Monitor WBE660S+ Monitor WBE530

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.5%
An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Zyxel · WBE530 firmwareZyxel · WBE660S firmware
Related CVEs — Zyxel WBE530 firmware

In the same product, most dangerous first.

CVE-2024-7261CRITICALCVE-2024-7261EPSS 11.4%CVE-2023-6398HIGHCVE-2023-6398EPSS 1.3%CVE-2024-1575MEDIUMCVE-2024-1575EPSS 0.3%CVE-2023-37925MEDIUMCVE-2023-37925EPSS 0.2%CVE-2023-5797MEDIUMCVE-2023-5797EPSS 0.2%