CVE-2025-1732 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an aut…
Medium CVSS: 6.7

CVE-2025-1732

An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable device.
Vendor
Zyxel
Product
Uos
CWE
CWE-269
Yayın Tarihi
2025-04-22 03:15:21
Güncelleme
2025-10-30 17:56:11
Source Identifier
security@zyxel.com.tw
KEV Date Added
-

Kategoriler

CWE-269 Uos MEDIUM Zyxel 2025

Referanslar

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-incorrect-permission-assignment-and-improper-privilege-management-vulnerabilities-in-usg-flex-h-series-firewalls-04-22-2025