CVE-2024-41720

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-41720
Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15, which may allow a network-adjacent authenticated attacker to alter the configuration of the device.

8.0 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://jvn.jp/en/jp/JVN70666401/ Third Party Advisory
https://www.zexelon.co.jp/pdf/jvn70666401.pdf Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:zexelon:zwx-2000csw2-hn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zexelon:zwx-2000csw2-hn:*:*:*:*:*:*:*:*
History

30 Aug 2024, 17:49

Type Values Removed Values Added
CWE CWE-732
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.0
References () https://jvn.jp/en/jp/JVN70666401/ - () https://jvn.jp/en/jp/JVN70666401/ - Third Party Advisory
References () https://www.zexelon.co.jp/pdf/jvn70666401.pdf - () https://www.zexelon.co.jp/pdf/jvn70666401.pdf - Vendor Advisory
CPE cpe:2.3:o:zexelon:zwx-2000csw2-hn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zexelon:zwx-2000csw2-hn:*:*:*:*:*:*:*:*
First Time Zexelon
Zexelon zwx-2000csw2-hn
Zexelon zwx-2000csw2-hn Firmware

05 Aug 2024, 12:41

Type Values Removed Values Added
Summary
  • (es) Existe una asignación de permisos incorrecta para problemas de recursos críticos en versiones de firmware ZWX-2000CSW2-HN anteriores a la versión 0.3.15, lo que puede permitir que un atacante autenticado adyacente a la red altere la configuración del dispositivo.

05 Aug 2024, 05:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-05 05:15

Updated : 2024-08-30 17:49

NVD link : CVE-2024-41720

Mitre link : CVE-2024-41720

CVE.ORG link : CVE-2024-41720

JSON object : View

Products Affected

zexelon

  • zwx-2000csw2-hn
  • zwx-2000csw2-hn_firmware
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource