Zyxel WBE530 and WBE660S Improper Privilege Management Vulnerability Allowing Privilege Escalation

Vulnerability

A vulnerability has been identified in the web management interface of the Zyxel WBE530 and WBE660S access points. This vulnerability, present in WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2), allows an authenticated user with limited privileges to escalate their privileges to that of an administrator. This privilege escalation could enable the user to upload configuration files to the affected device.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain administrative rights on the device.

Remediation

Users can upgrade to WBE530 version 7.10(ACIL.1) or WBE660S version 7.00(ACGG.1) to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
5.0
exploitability
4.9
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.