USG FLEX H series uOS firmware vulnerabilities

2 known vulnerabilities in USG FLEX H series uOS firmware from Zyxel. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  USG FLEX H series uOS firmware: Incorrect Permission Assignment for Critical Resource

  CVE-2025-1731Apr 22, 2025Zyxel

  An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticated local attacker with low privileges to gain access to the Linux shell and esca

• 7.8 High severity

  USG FLEX H series uOS firmware: Insufficiently Protected Credentials

  CVE-2024-9677Oct 22, 2024Zyxel

  The insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H series uOS firmware version V1.21 and earlier versions could allow an authenticated local attacker to gain privilege escalation by stealing the authentication token of