← Database

CVE-2025-1732

MEDIUM CVSS: 6.7 Published: 2025-04-22 Modified: 2026-06-17

Description

An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable device.

Affected Platforms

Zyxel Usg Flex 100HpZyxel Usg Flex 100HZyxel Usg Flex 200HpZyxel Usg Flex 200HZyxel Usg Flex 500HZyxel Usg Flex 50HZyxel UosZyxel Usg Flex 700HZyxel Usg Flex 50Hp

Weakness Type

CWE-269

References