CVE-2025-15428: falha de alta gravidade em UTT 进取 512W
UTT 进取 512W formRemoteControl strcpy buffer overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.9%
A weakness has been identified in UTT 进取 512W 1.7.7-171114. Affected is the function strcpy of the file /goform/formRemoteControl. This manipulation of the argument Profile causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
UTT · 进取 512WCVEs relacionadas — UTT 进取 512W
No mesmo produto, das mais perigosas para as menos.
CVE-2025-14534CRITICALUTT 进取 512W Endpoint formNatStaticMap strcpy buffer overflowEPSS 5.7%CVE-2025-14535CRITICALUTT 进取 512W formConfigFastDirectionW strcpy buffer overflowEPSS 5.6%CVE-2025-14572HIGHUTT 进取 512W formWebAuthGlobalConfig memory corruptionEPSS 3.5%CVE-2025-15429HIGHUTT 进取 512W formConfigCliForEngineerOnly strcpy buffer overflowEPSS 0.9%CVE-2025-15092HIGHUTT 进取 512W ConfigExceptMSN strcpy buffer overflowEPSS 0.8%CVE-2025-15091HIGHUTT 进取 512W formPictureUrl strcpy buffer overflowEPSS 0.8%