“An SSH tunnel with port forwarding exposes the database service to external access, creating a direct communication channel with the database from a remote system,” explains the researcher. “By leveraging this capability, I was able to achieve remote code execution (RCE), successfully executing system commands to retrieve sensitive system information,” the researcher said. Cyber Security News is a Dedicated News Platform For Cyber News, Cyber Attack News, Hacking News & Vulnerability Analysis. The flaw, discovered by a researcher “rainpwn” and officially disclosed on April 22, 2025, exposes these enterprise-grade security appliances to potentially devastating attacks. The vulnerability highlights the critical importance of proper database access controls and authentication mechanisms, even for services intended to be accessible only locally. Organizations using Zyxel FLEX-H devices should treat this update as an emergency security measure, as exploitation tools are likely to appear rapidly following public disclosure. The vulnerability stems from an architectural misconfiguration in the PostgreSQL database service running on affected devices. This vulnerability is particularly dangerous because database access requires no authentication. Gurubaran is a co-founder of Cyber Security News and GBHackers On Security.
This Cyber News was published on cybersecuritynews.com. Publication date: Thu, 24 Apr 2025 13:55:09 +0000