vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2024-9677

HIGH
7.8
CVSS Score
Published: October 22, 2024 at 01:19 AM UTC
Updated: June 17, 2026 at 08:25 AM UTC
12 products affected across 1 vendorUsg Flex 200H FirmwareUsg Flex 100H FirmwareUsg Flex 500H Firmware

Using USG FLEX H series uOS firmware by Zyxel?

Get instant alerts when new vulnerabilities affect USG FLEX H series uOS firmware - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

The insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H series uOS firmware version V1.21 and earlier versions could allow an authenticated local attacker to gain privilege escalation by stealing the authentication token of a login administrator. Note that this attack could be successful only if the administrator has not logged out.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Uos· Zyxel
95%
v < 1.30
Affected range stops below 1.30, so it looks safe — our inference, not a vendor statement
zyxel-usg-flex-100h (same device) · zyxel-usg-flex-200h (same device) · zyxel-usg-flex-200hp (same device) · zyxel-usg-flex-500h (same device) · zyxel-usg-flex-700h (same device)
Usg Flex 100H Firmware· Zyxel
95%
All versions
Usg Flex 200H Firmware· Zyxel
95%
All versions
Usg Flex 200HP Firmware· Zyxel
95%
All versions
Usg Flex 500H Firmware· Zyxel
95%
All versions
USG FLEX 700H· Zyxel
60%
v ≤ 1.21
Usg Flex 700H Firmware· Zyxel
60%
v ≤ 1.21
USG FLEX H· Zyxel
60%
<= V1.21
Usg Flex 100H· Zyxeldevice
80%
All versions
Usg Flex 200H· Zyxeldevice
80%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

Vendor Advisory
Source: [email protected]
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-insufficiently-protected-credentials-vulnerability-in-firewalls-10-22-2024

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGH[email protected]
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-522

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card