EUVD-2026-19263
GHSA-pq4m-hq9c-2vrf
Severity by source
AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
AnalysisAI
Buffer overflow in UTT Aggressive 520W v3 firmware version 1.7.7-180627 allows authenticated high-privilege attackers to cause denial of service by supplying crafted input to the addCommand parameter of the formConfigCliForEngineerOnly function. The vulnerability requires administrative-level access and local network connectivity, limiting real-world attack surface despite the buffer overflow class of vulnerability.
Technical ContextAI
The vulnerability is a classic stack-based or heap-based buffer overflow (CWE-120: Buffer Copy without Checking Size of Input) in the formConfigCliForEngineerOnly function within UTT Aggressive 520W v3 network device firmware. The addCommand parameter fails to validate input length before copying user-supplied data into a fixed-size buffer, allowing an attacker with high privilege access to overwrite adjacent memory. This memory corruption can crash the device firmware or potentially corrupt device state, resulting in denial of service. The affected product is a network appliance, and the vulnerability is triggered through a web-based or CLI administrative interface.
RemediationAI
Contact UTT (Universal Telemetry Technologies or equivalent vendor) for a patched firmware version addressing CVE-2026-31065. Patch version specifics are not provided in the available advisory data; firmware updates should be obtained directly from the vendor's support portal or security advisory. As an interim mitigation, restrict administrative access to the UTT Aggressive 520W v3 device to trusted administrators only, implement network segmentation to limit local network access to the device to authorized management networks, and disable remote administrative access if not required. Detailed remediation steps are available at https://github.com/zxq0408/Vul202601/blob/main/8.md and https://nvd.nist.gov/vuln/detail/CVE-2026-31065.
More in 520w Firmware
View allA flaw has been found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formA
Remote code execution in UTT 520W firmware via stack-based buffer overflow in the /goform/formPictureUrl endpoint allows
Remote code execution in UTT 520W firmware (version 1.7.7-180627) via a stack buffer overflow in the /goform/formConfigN
Remote code execution in UTT 520W firmware 1.7.7-180627 via buffer overflow in the wireless configuration endpoint allow
Remote code execution in UTT 520W Firmware 1.7.7-180627 via buffer overflow in the /goform/formFireWall endpoint allows
Remote code execution in UTT 520W firmware versions through 1.7.7-180627 stems from a buffer overflow in the /goform/for
Unauthenticated attackers can exploit a buffer overflow in the UTT 520W Firmware's P2P configuration function via a craf
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 through a buffer overflow in the /goform/formPoli
Remote code execution in UTT 520W firmware 1.7.7-180627 allows authenticated attackers to execute arbitrary code via a b
Remote code execution in UTT 520W firmware through a buffer overflow in the /goform/formTimeGroupConfig endpoint allows
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 via stack buffer overflow in the /goform/formIpGr
Remote code execution in UTT 520W firmware 1.7.7-180627 via a buffer overflow in the /goform/ConfigExceptAli endpoint al
Same weakness CWE-120 – Classic Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today