CVE-2024-12398: Zyxel NWA110AX Firmware

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.

Affected products

• Zyxel NWA110AX Firmware: before 7.10\(abtg.1\) (fixed in 7.10\(abtg.1\))
• Zyxel NWA1123ACV3 Firmware: before 6.70\(abvt.6\) (fixed in 6.70\(abvt.6\))
• Zyxel NWA130BE Firmware: before 7.10\(acil.1\) (fixed in 7.10\(acil.1\))
• Zyxel NWA210AX Firmware: before 7.10\(abtd.1\) (fixed in 7.10\(abtd.1\))
• Zyxel NWA220AX-6e Firmware: before 7.10\(acco.1\) (fixed in 7.10\(acco.1\))
• Zyxel NWA50AX Firmware: before 7.10\(abyw.1\) (fixed in 7.10\(abyw.1\))
• Zyxel NWA50AX Pro Firmware: before 7.10\(acge.1\) (fixed in 7.10\(acge.1\))
• Zyxel NWA55AXE Firmware: before 7.10\(abzl.1\) (fixed in 7.10\(abzl.1\))
• Zyxel NWA90AX Firmware: before 7.10\(accv.1\) (fixed in 7.10\(accv.1\))
• Zyxel NWA90AX Pro Firmware: before 7.10\(acgf.1\) (fixed in 7.10\(acgf.1\))
• Zyxel Usg Lite 60ax Firmware: before 2.10\(acip.0\) (fixed in 2.10\(acip.0\))
• Zyxel WAC500 Firmware: before 6.70\(abvs.6\) (fixed in 6.70\(abvs.6\))
• Zyxel WAC500H Firmware: before 6.70\(abwa.6\) (fixed in 6.70\(abwa.6\))
• Zyxel WAX300H Firmware: before 7.10\(achf.1\) (fixed in 7.10\(achf.1\))
• Zyxel WAX510D Firmware: before 7.10\(abtf.1\) (fixed in 7.10\(abtf.1\))
• Zyxel WAX610D Firmware: before 7.10\(abte.1\) (fixed in 7.10\(abte.1\))
• Zyxel WAX620D-6e Firmware: before 7.10\(accn.1\) (fixed in 7.10\(accn.1\))
• Zyxel WAX630S Firmware: before 7.10\(abzd.1\) (fixed in 7.10\(abzd.1\))
• Zyxel WAX640S-6e Firmware: before 7.10\(accm.1\) (fixed in 7.10\(accm.1\))
• Zyxel WAX650S Firmware: before 7.10\(abrm.1\) (fixed in 7.10\(abrm.1\))
• Zyxel WAX655E Firmware: before 7.10\(acdo.1\) (fixed in 7.10\(acdo.1\))
• Zyxel WBE530 Firmware: before 7.10\(acle.1\) (fixed in 7.10\(acle.1\))
• Zyxel WBE660S Firmware: before 7.00\(acgg.1\) (fixed in 7.00\(acgg.1\))

Published 2025-01-14. Last modified 2026-06-17.