CVE-2025-1731

🗓️ 22 Apr 2025 01:52:04Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 119 Views

Vulnerability in PostgreSQL commands allows privilege escalation via stolen tokens in USG FLEX firmware.

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	The vulnerability of the microprogramming software for ZyXEL USG FLEX H devices arises from the improper assignment of permissions to critical resources, allowing attackers to enhance their privileges.	10 Oct 202500:00	–	bdu_fstec
Circl	CVE-2025-1731	22 Apr 202503:02	–	circl
CNNVD	Zyxel USG FLEX 安全漏洞	22 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-1731	22 Apr 202501:52	–	cvelist
Exploit DB	Zyxel USG FLEX H series uOS 1.31 - Privilege Escalation	18 May 202500:00	–	exploitdb
EUVD	EUVD-2025-12140	3 Oct 202520:07	–	euvd
Kitploit	vulns	2 Sep 202601:11	–	kitploit
Kitploit	exploits	1 Sep 202619:59	–	kitploit
Kitploit	vulns	1 Sep 202610:42	–	kitploit
NVD	CVE-2025-1731	22 Apr 202503:15	–	nvd

NVD

Node

AND

zyxel uosRange1.20–1.32

zyxel usg_flex_100hMatch-

zyxel usg_flex_100hpMatch-

zyxel usg_flex_200hMatch-

zyxel usg_flex_200hpMatch-

zyxel usg_flex_500hMatch-

zyxel usg_flex_50hMatch-

zyxel usg_flex_50hpMatch-

zyxel usg_flex_700hMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX H series uOS firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "from V1.20 through V1.31"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-incorrect-permission-assignment-and-improper-privilege-management-vulnerabilities-in-usg-flex-h-series-firewalls-04-22-2025
seclists	www.seclists.org/fulldisclosure/2025/Apr/27

17 Jun 2026 08:39Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.8

EPSS0.00938

SSVC

CWE-732