What is the CVSS score of CVE-2025-7570?

CVE-2025-7570 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of 840g Firmware are affected by CVE-2025-7570?

A critical remote buffer overflow vulnerability exists in UTT HiPER 840G devices (versions up to 3.1.1-190328) that allows unauthenticated attackers to execute arbitrary code without user…

Is there a public PoC exploit available for CVE-2025-7570?

Yes, a public proof-of-concept exploit is available for CVE-2025-7570. Prioritise patching immediately. EPSS: 0.3%.

How to fix or mitigate CVE-2025-7570?

Within 24 hours: Identify all UTT HiPER 840G devices in production and isolate them from untrusted networks or place behind authenticated access controls; document inventory and current firmware versions. Within 7 days: Implement WAF rules blocking POST requests to /goform/aspRemoteApConfTempSend endpoint; restrict device management access to approved IP ranges only; monitor for exploit attempts in network logs. Within 30 days: Evaluate replacement devices from responsive vendors; contact UTT for emergency patches or firmware updates; conduct vulnerability assessment on all internet-facing devices from this vendor.

840g Firmware CVE-2025-7570

EUVD-2025-21306 HIGH

Buffer Overflow (CWE-119)

2025-07-14 cna@vuldb.com

Buffer Overflow 840g Firmware Utt

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 09:43 euvd

EUVD-2025-21306

Analysis Generated

Mar 16, 2026 - 09:43 vuln.today

PoC Detected

Jan 08, 2026 - 19:42 vuln.today

Public exploit code

CVE Published

Jul 14, 2025 - 04:15 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was found in UTT HiPER 840G up to 3.1.1-190328. It has been rated as critical. Affected by this issue is some unknown functionality of the file /goform/aspRemoteApConfTempSend. The manipulation of the argument remoteSrcTemp leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

CVE-2025-7570 is a critical remote buffer overflow vulnerability in UTT HiPER 840G devices up to version 3.1.1-190328, affecting the /goform/aspRemoteApConfTempSend endpoint via the remoteSrcTemp parameter. An authenticated remote attacker can exploit this to achieve arbitrary code execution with high impact on confidentiality, integrity, and availability. A public exploit exists and the vendor has not responded to early disclosure, indicating active exploitation risk.

Technical ContextAI

This vulnerability is a classic buffer overflow (CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer) in a web application endpoint. The UTT HiPER 840G is a network access control device/gateway product that exposes a vulnerable form handler at /goform/aspRemoteApConfTempSend. The remoteSrcTemp parameter fails to implement proper bounds checking before writing to a fixed-size buffer, allowing attackers to overwrite adjacent memory. The affected product family (CPE approximation: cpe:2.3:a:utt:hiper:*:*:*:*:*:*:*:* with versions <=3.1.1-190328) suggests this is embedded network management firmware. The vulnerability resides in server-side form processing logic, likely written in C/C++ given the buffer overflow nature.

RemediationAI

{'type': 'patch', 'status': 'unavailable', 'notes': 'Vendor (UTT Technologies) has not responded to early disclosure and no official patch is available. No vendor advisory exists.'} {'type': 'workaround', 'recommendation': 'Restrict network access to /goform/aspRemoteApConfTempSend endpoint via firewall or WAF rules. Implement access controls limiting exposure to trusted administrative networks only. Monitor for authentication attempts to this endpoint.'} {'type': 'mitigation', 'recommendation': 'Disable remote management interfaces if not required. Segment HiPER 840G devices on isolated management networks. Require VPN/bastion host access to device web interface. Monitor process and memory activity on affected devices for signs of exploitation.'} {'type': 'long_term', 'recommendation': 'Evaluate replacement with actively-maintained network access control solutions from vendors with responsive security practices. Contact UTT Technologies directly to demand security updates or consider end-of-life planning for this product line.'}