CVE-2025-1732: Medium severity Zyxel USG FLEX H series uOS firmware vulnerability
An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1732?
CVE-2025-1732 has a high severity due to its potential for privilege escalation by an authenticated attacker.
How do I fix CVE-2025-1732?
To fix CVE-2025-1732, update the USG FLEX H series uOS firmware to a version later than V1.31.
Who is affected by CVE-2025-1732?
CVE-2025-1732 affects users of the USG FLEX H series uOS firmware version V1.31 and earlier.
What type of attack does CVE-2025-1732 enable?
CVE-2025-1732 enables an authenticated local attacker to escalate privileges by uploading a crafted configuration file.
What is the impact of CVE-2025-1732?
The impact of CVE-2025-1732 is that it allows an attacker with administrator access to compromise the device's security.