CVE-2025-1732

🗓️ 22 Apr 2025 01:57:35Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 70 Views

Improper privilege management in USG FLEX H series uOS firmware allows configuration file uploads.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2025-1732	22 Apr 202503:02	–	circl
CNNVD	Zyxel USG FLEX 安全漏洞	22 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-1732	22 Apr 202501:57	–	cvelist
Exploit DB	Zyxel USG FLEX H series uOS 1.31 - Privilege Escalation	18 May 202500:00	–	exploitdb
EUVD	EUVD-2025-12335	3 Oct 202520:07	–	euvd
Kitploit	advisories	27 Aug 202601:41	–	kitploit
Kitploit	vulns	27 Aug 202602:21	–	kitploit
NVD	CVE-2025-1732	22 Apr 202503:15	–	nvd
OSV	CVE-2025-1732	22 Apr 202503:15	–	osv
Packet Storm	📄 Zyxel uOS 1.31 Privilege Escalation	23 Apr 202500:00	–	packetstorm

NVD

Node

AND

zyxel uosMatch1.31

zyxel usg_flex_100hMatch-

zyxel usg_flex_100hpMatch-

zyxel usg_flex_200hMatch-

zyxel usg_flex_200hpMatch-

zyxel usg_flex_500hMatch-

zyxel usg_flex_50hMatch-

zyxel usg_flex_50hpMatch-

zyxel usg_flex_700hMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "USG FLEX H series uOS firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= V1.31"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-incorrect-permission-assignment-and-improper-privilege-management-vulnerabilities-in-usg-flex-h-series-firewalls-04-22-2025

17 Jun 2026 08:39Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.7

EPSS0.00202

SSVC

CWE-269