EUVD-2026-19259
GHSA-mr7p-c5rw-q9vj
Severity by source
AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
AnalysisAI
Buffer overflow in UTT Aggressive 520W v3 v1.7.7-180627 filename parameter of formFtpServerDirConfig function allows authenticated attackers with high privileges to cause denial of service. The vulnerability requires local network access and high-level administrative credentials; no public exploit code or active exploitation has been confirmed at time of analysis.
Technical ContextAI
This vulnerability is a classic stack-based or heap-based buffer overflow (CWE-120: Buffer Copy without Checking Size of Input) in the FTP server configuration handler of the UTT Aggressive 520W network device. The formFtpServerDirConfig function fails to properly validate the length of the filename parameter before copying it into a fixed-size buffer, allowing an authenticated administrator to inject malicious input that overwrites adjacent memory. The affected product is a network appliance (likely a gateway or router) running firmware version 1.7.7-180627; the vulnerability is specific to this device model and firmware revision.
RemediationAI
No vendor-released patch has been identified at time of analysis. Immediate mitigation should focus on restricting administrative access to the FTP server configuration interface: disable FTP server functionality if not required, limit administrative console access to trusted personnel and IP ranges, and apply network segmentation to prevent untrusted hosts from reaching the device's management interface. Firmware upgrades beyond v1.7.7-180627 should be evaluated if available from UTT; consult the device vendor's security advisories at https://nvd.nist.gov/vuln/detail/CVE-2026-31062 and the referenced GitHub disclosure at https://github.com/zxq0408/Vul202601/blob/main/7.md for additional technical details and potential workarounds.
More in 520w Firmware
View allA flaw has been found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formA
Remote code execution in UTT 520W firmware via stack-based buffer overflow in the /goform/formPictureUrl endpoint allows
Remote code execution in UTT 520W firmware (version 1.7.7-180627) via a stack buffer overflow in the /goform/formConfigN
Remote code execution in UTT 520W firmware 1.7.7-180627 via buffer overflow in the wireless configuration endpoint allow
Remote code execution in UTT 520W Firmware 1.7.7-180627 via buffer overflow in the /goform/formFireWall endpoint allows
Remote code execution in UTT 520W firmware versions through 1.7.7-180627 stems from a buffer overflow in the /goform/for
Unauthenticated attackers can exploit a buffer overflow in the UTT 520W Firmware's P2P configuration function via a craf
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 through a buffer overflow in the /goform/formPoli
Remote code execution in UTT 520W firmware 1.7.7-180627 allows authenticated attackers to execute arbitrary code via a b
Remote code execution in UTT 520W firmware through a buffer overflow in the /goform/formTimeGroupConfig endpoint allows
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 via stack buffer overflow in the /goform/formIpGr
Remote code execution in UTT 520W firmware 1.7.7-180627 via a buffer overflow in the /goform/ConfigExceptAli endpoint al
Same weakness CWE-120 – Classic Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today