CVE-2025-1731

🗓️ 22 Apr 2025 01:52:04Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 67 Views

Vulnerability in PostgreSQL commands allows privilege escalation via stolen tokens in USG FLEX firmware.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-1731	22 Apr 202503:02	–	circl
CNNVD	Zyxel USG FLEX 安全漏洞	22 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-1731	22 Apr 202501:52	–	cvelist
Exploit DB	Zyxel USG FLEX H series uOS 1.31 - Privilege Escalation	18 May 202500:00	–	exploitdb
EUVD	EUVD-2025-12140	3 Oct 202520:07	–	euvd
NVD	CVE-2025-1731	22 Apr 202503:15	–	nvd
Packet Storm	📄 Zyxel uOS 1.31 Privilege Escalation	23 Apr 202500:00	–	packetstorm
Positive Technologies	PT-2025-17479 · Unknown · Usg Flex H Series +1	22 Apr 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-1731	7 Jan 202609:12	–	redhatcve
Vulnrichment	CVE-2025-1731	22 Apr 202501:52	–	vulnrichment

NVD

Node

zyxel uosRange1.20–1.32

AND

zyxel usg_flex_100hMatch-

zyxel usg_flex_100hpMatch-

zyxel usg_flex_200hMatch-

zyxel usg_flex_200hpMatch-

zyxel usg_flex_500hMatch-

zyxel usg_flex_50hMatch-

zyxel usg_flex_50hpMatch-

zyxel usg_flex_700hMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX H series uOS firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "from V1.20 through V1.31"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-incorrect-permission-assignment-and-improper-privilege-management-vulnerabilities-in-usg-flex-h-series-firewalls-04-22-2025
seclists	www.seclists.org/fulldisclosure/2025/Apr/27

30 Oct 2025 17:55Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.8

EPSS0.00349

SSVC

CWE-732