CVE-2025-1731

🗓️ 22 Apr 2025 01:52:04Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 138 Views

Vulnerability in PostgreSQL commands allows privilege escalation via stolen tokens in USG FLEX firmware.

Reporter	Title	Published	Views	Family All 17
BDU FSTEC	ZyXEL USG FLEX H Privilege Escalation	10 Oct 202500:00	–	bdu_fstec
Circl	CVE-2025-1731	22 Apr 202503:02	–	circl
CNNVD	Zyxel USG FLEX security vulnerabilities	22 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-1731	22 Apr 202501:52	–	cvelist
Exploit DB	Zyxel USG FLEX H series uOS 1.31 - Privilege Escalation	18 May 202500:00	–	exploitdb
EUVD	EUVD-2025-12140	3 Oct 202520:07	–	euvd
Kitploit	vulns	31 Oct 202609:58	–	kitploit
Kitploit	exploits	1 Nov 202602:38	–	kitploit
Kitploit	vulns	10 Oct 202609:56	–	kitploit
NVD	CVE-2025-1731	22 Apr 202503:15	–	nvd

NVD

Vulners

Node

AND

zyxel uosRange1.20–1.32

zyxel usg_flex_100hMatch-

zyxel usg_flex_100hpMatch-

zyxel usg_flex_200hMatch-

zyxel usg_flex_200hpMatch-

zyxel usg_flex_500hMatch-

zyxel usg_flex_50hMatch-

zyxel usg_flex_50hpMatch-

zyxel usg_flex_700hMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX H series uOS firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "from V1.20 through V1.31"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-incorrect-permission-assignment-and-improper-privilege-management-vulnerabilities-in-usg-flex-h-series-firewalls-04-22-2025
seclists	www.seclists.org/fulldisclosure/2025/Apr/27

17 Jun 2026 08:39Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.8

EPSS0.00951

SSVC

CWE-732