CVE-2024-12398 Privilege escalation in WBE530 firmware
Authenticated low-privilege users can escalate to administrator on Zyxel WBE530 and WBE660S devices, allowing configuration file uploads.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-12398?
CVE-2024-12398 is a high-severity vulnerability in Zyxel WBE530 firmware, published on 14 Jan 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.
Weakness: CWE-269
Which versions are affected by CVE-2024-12398?
It affects 23 products.
Products include Zyxel Nwa110ax Firmware, Zyxel Nwa1123acv3 Firmware, Zyxel Nwa130be Firmware, Zyxel Nwa210ax Firmware, Zyxel Nwa220ax-6e Firmware, Zyxel Nwa50ax Firmware and 17 more.
How do I fix CVE-2024-12398?
No fix has been published for CVE-2024-12398 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-12398 being exploited?
There is no known exploitation of CVE-2024-12398 in the wild and no public exploit code.
Other vulnerabilities in Zyxel WBE530 firmware
Sources
Also known as GHSA-29rw-7xhw-cxx2.