What is the CVSS score of EUVD-2026-41225?

EUVD-2026-41225 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of UTT nv518G are affected by EUVD-2026-41225?

UTT nv518G gateway/router (firmware nv518GV3v3.2.7) is vulnerable to remote, unauthenticated denial-of-service attacks with publicly available exploit code, allowing attackers to crash the device and…

How to fix or mitigate EUVD-2026-41225?

24 hours: Inventory all UTT nv518G routers running firmware nv518GV3v3.2.7-210919-161313 or earlier; assess network exposure and document business-critical dependencies. 7 days: Deploy firewall rules restricting network access to the gateway; implement rate limiting and request filtering on inbound connections; establish traffic logging and alerting. 30 days: Monitor vendor advisories for patch release; conduct testing in a controlled environment; schedule and execute firmware upgrades on all affected devices upon patch availability.

UTT nv518G EUVD-2026-41225

| CVE-2026-52190 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-07-01 cve@mitre.org

GHSA-2fgx-9w4g-59gc

Buffer Overflow Denial Of Service Stack Overflow

7.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

7.5 HIGH

Network-reachable gohead service, no auth or interaction, low-complexity crash yields availability-only impact (A:H) with no confidentiality or integrity effect.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 02, 2026 - 13:52 vuln.today

CVSS changed

Jul 02, 2026 - 13:52 NVD

7.5 (HIGH)

CVE Published

Jul 01, 2026 - 22:16 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_448384 component

AnalysisAI

Denial of service in the UTT nv518G gateway/router (firmware nv518GV3v3.2.7-210919-161313) lets a remote attacker crash the device by sending crafted input to the gohead/sub_448384 (FUN_00448384) handler, triggering a stack-based buffer overflow. The CVSS 3.1 vector marks it network-reachable and unauthenticated with high availability impact but no confidentiality or integrity effect. Publicly available exploit code exists via a GitHub CVE report; there is no CISA KEV listing and no EPSS score in the provided data.

Technical ContextAI

The UTT nv518G is an enterprise/SOHO gateway (router) from the Chinese vendor UTT (utt.com.cn). The affected component 'gohead' is the embedded web/management server (the naming strongly suggests a GoAhead-derived HTTP server common on such appliances), and sub_448384 / FUN_00448384 is a disassembled function address in the firmware binary that processes attacker-controlled request data. CWE-121 (stack-based buffer overflow) identifies the root cause: the function copies externally supplied data into a fixed-size stack buffer without adequate bounds checking, allowing the return address / adjacent stack memory to be corrupted and the process to crash. Because the impact profile is A:H with C:N/I:N, the reported effect is limited to service disruption rather than confirmed code execution.

RemediationAI

No vendor-released patch version is identified at time of analysis; the vendor advisory data only points to UTT's general download center (https://utt.com.cn/downloadcenter.php?filetypeid=3&model=518G&lang=zhcn), so administrators should check there for a firmware build newer than nv518GV3v3.2.7-210919-161313 and apply it once available. As compensating controls, restrict reachability of the gohead management/web service by binding it to the LAN only and blocking WAN-side access to its HTTP(S) management port at the perimeter firewall (trade-off: remote administration must then be done via VPN); place the device management plane on a dedicated management VLAN with ACLs limiting access to trusted admin hosts (trade-off: added network configuration); and monitor for unexpected reboots/service restarts as a detection signal for exploitation attempts. Because the flaw is a DoS, these access restrictions meaningfully reduce exposure without functional loss to routing.