CVE-2025-14572highCWE-119

CVE-2025-14572: high-severity vulnerability in UTT 进取 512W

UTT 进取 512W formWebAuthGlobalConfig memory corruption

Published

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 3.5%
In short

A flaw in UTT 进取 512W devices allows attackers to corrupt memory by manipulating a parameter in the web authentication settings, potentially causing crashes or enabling unauthorized access without needing direct device access.

Technical detail

CWE-119 buffer overflow vulnerability in the /goform/formWebAuthGlobalConfig endpoint affecting UTT 进取 512W up to version 1.7.7-171114; remote attacker can send crafted input via the 'hidcontact' parameter to trigger out-of-bounds memory write, resulting in denial of service or potential code execution depending on memory layout and protections.

Summary generated and translated by AI from the official description.
A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This affects an unknown part of the file /goform/formWebAuthGlobalConfig. Performing manipulation of the argument hidcontact results in memory corruption. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
UTT · 进取 512W
Related CVEs — UTT 进取 512W

In the same product, most dangerous first.

CVE-2025-14534CRITICALUTT 进取 512W Endpoint formNatStaticMap strcpy buffer overflowEPSS 5.7%CVE-2025-14535CRITICALUTT 进取 512W formConfigFastDirectionW strcpy buffer overflowEPSS 5.6%CVE-2025-15428HIGHUTT 进取 512W formRemoteControl strcpy buffer overflowEPSS 0.9%CVE-2025-15429HIGHUTT 进取 512W formConfigCliForEngineerOnly strcpy buffer overflowEPSS 0.9%CVE-2025-15092HIGHUTT 进取 512W ConfigExceptMSN strcpy buffer overflowEPSS 0.8%CVE-2025-15091HIGHUTT 进取 512W formPictureUrl strcpy buffer overflowEPSS 0.8%