CVE-2024-9677

Name of the Vulnerable Software and Affected Versions USG FLEX H series uOS firmware versions V1.21 and earlier

Description The issue allows an authenticated local attacker to gain privilege escalation by stealing the authentication token of a login administrator. This attack could be successful only if the administrator has not logged out.

Recommendations For USG FLEX H series uOS firmware versions V1.21 and earlier, update to a version later than V1.21 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.