Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Zyxel USG FLEX H series uOS firmware — zyxel.com/global/en/support/security-advisories/zyxel-secur… Clear all filters
TI-2025-01491 CVE-2025-1732 · GHSA-7wf3-pq8r-xwwq

Improper privilege management in Zyxel USG FLEX H series uOS firmware

Priority LOW 31

An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to u…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00203 Published 2025-04-22 No fix listed CWE-269
TI-2025-01490 CVE-2025-1731 · GHSA-2w3x-653c-q4pc

Incorrect permission assignment in Zyxel USG FLEX H series uOS firmware

Priority HIGH 69

An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticated local attacker with low privileges to…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00951 Published 2025-04-22 No fix listed CWE-732