Description
An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zyxel | USG FLEX H series uOS firmware | <= V1.31 | — |
Advisories 1
- WID-SEC-2025-0855 Zyxel Firewall: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Apr 21, 2025