High severity7.3NVD Advisory· Published Apr 11, 2022· Updated Jun 17, 2026

CVE-2022-0556

Description

A local privilege escalation vulnerability caused by incorrect permission assignment in some directories of the Zyxel AP Configurator (ZAC) version 1.1.4, which could allow an attacker to execute arbitrary code as a local administrator.

Affected products

Zyxel/Zyxel Ap Configurator
cpe:2.3:a:zyxel:zyxel_ap_configurator:1.1.4:*:*:*:*:*:*:*
Zyxel/AP Configuratorllm-create
Range: = 1.1.4
Zyxel/Zyxel AP Configurator (ZAC)v5
Range: V1.1.4

Patches

Vulnerability mechanics

References

www.zyxel.com/support/Zyxel-security-advisory-for-local-privilege-escalation-vulnerability-of-AP-Configurator.shtmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000