CVE-2025-1732

🗓️ 22 Apr 2025 01:57:35Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 56 Views

Improper privilege management in USG FLEX H series uOS firmware allows configuration file uploads.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-1732	22 Apr 202503:02	–	circl
CNNVD	Zyxel USG FLEX 安全漏洞	22 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-1732	22 Apr 202501:57	–	cvelist
Exploit DB	Zyxel USG FLEX H series uOS 1.31 - Privilege Escalation	18 May 202500:00	–	exploitdb
EUVD	EUVD-2025-12335	3 Oct 202520:07	–	euvd
NVD	CVE-2025-1732	22 Apr 202503:15	–	nvd
Packet Storm	📄 Zyxel uOS 1.31 Privilege Escalation	23 Apr 202500:00	–	packetstorm
Positive Technologies	PT-2025-17480 · Unknown · Usg Flex H Series	22 Apr 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-1732	7 Jan 202609:17	–	redhatcve
Vulnrichment	CVE-2025-1732	22 Apr 202501:57	–	vulnrichment

NVD

Node

zyxel uosMatch1.31

AND

zyxel usg_flex_100hMatch-

zyxel usg_flex_100hpMatch-

zyxel usg_flex_200hMatch-

zyxel usg_flex_200hpMatch-

zyxel usg_flex_500hMatch-

zyxel usg_flex_50hMatch-

zyxel usg_flex_50hpMatch-

zyxel usg_flex_700hMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX H series uOS firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= V1.31"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-incorrect-permission-assignment-and-improper-privilege-management-vulnerabilities-in-usg-flex-h-series-firewalls-04-22-2025

30 Oct 2025 17:56Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.7

EPSS0.00076

SSVC

CWE-269