Incorrect Privilege Assignment in AP Configurator - CVE-2022-0556

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU62546

Incorrect Privilege Assignment in AP Configurator - CVE-2022-0556

Published: April 25, 2022 / Updated: June 30, 2022


Vulnerability identifier: #VU62546
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2022-0556
CWE-ID: CWE-266
Exploitation vector: Local access
Exploit availability: No public exploit available
Vendor: ZyXEL Communications Corp.
Affected software:
AP Configurator

Detailed vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect permission assignment within installer to some directories, which leads to security restrictions bypass and privilege escalation.


How to mitigate CVE-2022-0556

Install updates from vendor's website.

Sources