CVE-2025-1731
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticated local attacker with low privileges to gain access to the Linux shell and escalate their privileges by crafting malicious scripts or modifying system configurations with administrator-level access through a stolen token. Modifying the system configuration is only possible if the administrator has not logged out and the token remains valid.
| CWE | CWE-732 |
| Vendor | zyxel |
| Product | usg flex h series uos firmware |
| Published | Apr 22, 2025 |
| Last Updated | Feb 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for zyxel usg flex h series uos firmware
Be the first to know when new high vulnerabilities affecting zyxel usg flex h series uos firmware are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Zyxel / USG FLEX H series uOS firmware
from V1.20 through V1.31