CVE-2022-0556 — Zyxel / Zyxel AP Configurator (ZAC)

CVE-2022-0556

Zyxel / Zyxel AP Configurator (ZAC) PUBLISHED

Description (CNA)

A local privilege escalation vulnerability caused by incorrect permission assignment in some directories of the Zyxel AP Configurator (ZAC) version 1.1.4, which could allow an attacker to execute arbitrary code as a local administrator.

Affected (CNA)

Vendor / product	Versions
Zyxel / Zyxel AP Configurator (ZAC)	affected V1.1.4

CWE

CWE-269

References

https://www.zyxel.com/support/Zyxel-security-advisory-for-local-privilege-escalation-vulnerability-of-AP-Configurator.shtml

ADP enrichment

CVE

No English description supplied.

https://www.zyxel.com/support/Zyxel-security-advisory-for-local-privilege-escalation-vulnerability-of-AP-Configurator.shtml