CVE-2025-1732

Published: Apr 22, 2025Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: security@zyxel.com.tw (Secondary)

Description

An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable device.

Affected (1)

Products: Zyxel: Uos

Zyxel

1 product

Uos

Configuration A

1 vulnerable · 8 platform

Vulnerable Software	Affected Versions
Zyxel Uos	Version 1.31

Running on/with	Platform Versions
Zyxel Usg Flex 100h	All versions
Zyxel Usg Flex 100hp	All versions
Zyxel Usg Flex 200h	All versions
Zyxel Usg Flex 200hp	All versions
Zyxel Usg Flex 500h	All versions
Zyxel Usg Flex 50h	All versions
Zyxel Usg Flex 50hp	All versions
Zyxel Usg Flex 700h	All versions

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-incorrect-permission-assignment-and-improper-privilege-management-vulnerabilities-in-usg-flex-h-series-firewalls-04-22-2025

Source: security@zyxel.com.tw

Vendor Advisory

Timeline

No history available yet.