CVE-2025-1732
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Apr 22, 2025
Updated: Apr 23, 2025
CWE ID 269
Summary
CVE-2025-1732 is a privilege escalation vulnerability affecting USG FLEX H series uOS firmware versions V1.31 and earlier. A local attacker with administrator privileges can exploit this improper privilege management issue in the recovery function. By uploading a specially crafted configuration file, they can escalate their privileges on the vulnerable device. This vulnerability poses a significant risk to network security and requires users to update their firmware to a secure version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.