{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T04:12:43.691","vulnerabilities":[{"cve":{"id":"CVE-2024-9677","sourceIdentifier":"security@zyxel.com.tw","published":"2024-10-22T02:15:04.380","lastModified":"2026-06-17T08:25:02.557","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H series uOS firmware version V1.21 and earlier versions could allow an authenticated local attacker to gain privilege escalation by stealing the authentication token of a login administrator. Note that this attack could be successful only if the administrator has not logged out."},{"lang":"es","value":"La vulnerabilidad de credenciales insuficientemente protegidas en el comando CLI de la versión de firmware uOS V1.21 y versiones anteriores de la serie USG FLEX H podría permitir que un atacante local autenticado obtenga una escalada de privilegios al robar el token de autenticación de un administrador que inició sesión. Tenga en cuenta que este ataque podría tener éxito solo si el administrador no ha cerrado sesión."}],"affected":[{"source":"security@zyxel.com.tw","affectedData":[{"vendor":"Zyxel","product":"USG FLEX H series uOS firmware","defaultStatus":"unaffected","versions":[{"version":"<= V1.21","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"zyxel","product":"usg_flex_700h_firmware","defaultStatus":"unaffected","cpes":["cpe:2.3:o:zyxel:usg_flex_100h_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:zyxel:usg_flex_100hp_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:zyxel:usg_flex_200h_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:zyxel:usg_flex_200hp_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:zyxel:usg_flex_500h_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:zyxel:usg_flex_700h_firmware:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"1.21","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@zyxel.com.tw","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T14:29:58.494312Z","id":"CVE-2024-9677","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@zyxel.com.tw","type":"Secondary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:uos:*:*:*:*:*:*:*:*","versionEndExcluding":"1.30","matchCriteriaId":"B53BCCF3-FFFC-4E52-997E-36A632C81F00"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg_flex_100h:-:*:*:*:*:*:*:*","matchCriteriaId":"ED28D5ED-B21A-4CD6-947E-9C21EA801B7D"},{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg_flex_200h:-:*:*:*:*:*:*:*","matchCriteriaId":"09D15ECD-4942-407A-A62E-9785568C6B78"},{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg_flex_200hp:-:*:*:*:*:*:*:*","matchCriteriaId":"FD7E9028-1ECB-4D88-84D8-CFC589B429AE"},{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg_flex_500h:-:*:*:*:*:*:*:*","matchCriteriaId":"DE57BCA4-8631-460A-BFE3-BB765E5D009F"},{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:usg_flex_700h:-:*:*:*:*:*:*:*","matchCriteriaId":"8832743A-99FA-417E-BCE1-4BF7D4CEF9BE"}]}]}],"references":[{"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-insufficiently-protected-credentials-vulnerability-in-firewalls-10-22-2024","source":"security@zyxel.com.tw","tags":["Vendor Advisory"]}]}}]}