512w Firmware
Monthly
Stack-based buffer overflow in the UTT 512W router (firmware 1.7.7-171114) allows an authenticated, network-positioned attacker to corrupt memory by sending an overlong filename value to the FTP-server directory configuration handler at /goform/formFtpServerDirConfig, with high confidentiality, integrity and availability impact on the device itself. Exploitation requires valid credentials (CVSS vector PR:L) and network reachability of the web management interface, so devices with management restricted to a trusted LAN and non-default credentials are substantially harder to reach. Publicly available exploit code exists, but there is no CISA KEV listing and EPSS is low (0.11%, 29th percentile), and no vendor patch has been released because the vendor did not respond to disclosure.
Stack-based buffer overflow in the UTT 进取 512W router (firmware 1.7.7-171114) lets an authenticated attacker who can reach the device web management interface crash or potentially execute code on the device by submitting an oversized 'oldfilename' parameter to /goform/formFtpServerShareDirSelcet. According to the CVSS 4.0 vector the attacker must already hold valid credentials (PR:L), so the flaw is a post-authentication escalation/denial-of-service vector rather than an unauthenticated remote compromise. Publicly available exploit code exists (a GitHub PoC was published alongside the disclosure) and the report indicates the vendor was contacted but never responded, so no fixed firmware has been released; EPSS is only 0.11% (29th percentile), and the overall risk is low because exploitation requires an authenticated session and the affected device/firmware combination has a very small deployment base.
An authenticated buffer overflow in the UTT 进取 512W router firmware 1.7.7-171114 allows a user who is already logged into the web management interface to crash or potentially execute code on the device by sending a single crafted request containing an overlong addCommand parameter to /goform/formConfigCliForEngineerOnly. The flaw is a classic unchecked strcpy into a fixed-size buffer, rated 7.4 (CVSS 4.0 and our independent CVSS 3.1 assessment both agree), and it requires valid credentials (PR:L) plus network reachability to the management interface, which is normally LAN-side unless remote administration has been enabled. Publicly available exploit code exists and the vendor did not respond to the disclosure, but there is no evidence of active exploitation (not in CISA KEV) and EPSS is only 0.04% (11th percentile), so this points to a low real-world priority despite the moderate score.
Stack-based buffer overflow in the web management interface of the UTT 进取 512W router (firmware 1.7.7-171114) allows authenticated remote attackers to crash or potentially execute code on the device by sending an oversized 'Profile' argument to /goform/formRemoteControl. Exploitation requires network reachability to the router's admin web UI plus valid low-privileged credentials (the CVSS vectors for both the NVD 4.0 score and the independent 3.1 assessment specify PR:L), and publicly available exploit code exists, though there is no evidence of active exploitation (CISA KEV does not list this CVE) and EPSS is only 0.04% (11th percentile). The vendor was contacted early but never responded, so no patch has been released, and real-world risk is low despite the 7.4 CVSS 4.0 score because the product is obscure, low-deployment, and the attack is gated behind authentication.
An unsafe strcpy() in the /goform/ConfigExceptMSN handler of UTT 进取 (JinQu) 512W router firmware up to and including 1.7.7-171114 lets an authenticated remote attacker overflow a stack buffer by supplying an overlong 'remark' parameter, corrupting adjacent memory and potentially leading to code execution in the context of the device's web server. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms network reachability, low attack complexity and high confidentiality, integrity and availability impact, but also makes clear that a low-privileged authenticated session on the web UI is required - the principal limiting factor. Publicly available exploit code exists (a GitHub write-up with a PoC under the cymiao1978/cve repository), so the barrier to reproduction is low, although no CISA KEV entry indicates confirmed active exploitation in the wild; real-world risk is dominated by whether the router's management interface is exposed beyond the trusted LAN.
Authenticated buffer overflow in the UTT 进取 512W wireless router firmware (versions up to and including 1.7.7-171114) lets a remote attacker with valid low-privilege credentials corrupt memory by sending an oversized 'importpictureurl' argument to the /goform/formPictureUrl endpoint, which is copied with strcpy without a length check. Successful exploitation can give an attacker high impact across confidentiality, integrity and availability of the device - typically full compromise of the web management context or a persistent crash/reboot loop. Publicly available exploit code exists (a detailed GitHub PoC), and the flaw carries an EPSS-relevant profile as a low-complexity, network-reachable web bug, but there is no CISA KEV listing, so no confirmed active exploitation has been observed.
A stack-based buffer overflow in the web management component of UTT 进取 512W router firmware (versions up to and including 1.7.7-171114) lets an attacker who holds a valid low-privilege management session crash or potentially execute code on the device by submitting an oversized 'timestart' value to /goform/formConfigNoticeConfig, which is copied with the unbounded strcpy function. The input's CVSS vector (PR:L, UI:N) confirms authentication is required but that no user interaction is needed once a session exists, and publicly available exploit code exists - no CISA KEV entry indicates confirmed active exploitation at the time of analysis. With a CVSS 4.0 base score of 7.4 and high confidentiality, integrity, and availability impact on the device, this is a genuine but moderate-priority issue rather than a top-tier emergency, primarily limited by the authentication prerequisite, the requirement that the admin interface be reachable, and the narrow deployment base of this specific router model.
Authenticated attackers who can reach the UTT 512W router's web management interface can trigger a strcpy-based buffer overflow in the /goform/APSecurity handler by submitting an overlong value in the 'wepkey1' wireless-security parameter, corrupting memory and potentially achieving code execution with the privileges of the device's HTTP process. The flaw affects UTT 512W firmware up to and including 1.7.7-171114; the CVSS 4.0 vector (AV:N/AC:L/PR:L/UI:N, VC:H/VI:H/VA:H) confirms the attack is network-reachable but requires at least low-privilege authentication, so it is not exploitable by unauthenticated outsiders unless the admin interface is exposed with weak, default, or reused credentials. Publicly available exploit code exists (a GitHub PoC accompanies the VulDB disclosure), but there is no evidence of confirmed active exploitation (no CISA KEV listing), placing this at moderate rather than emergency priority.
Memory corruption in UTT 512W firmware up to 1.7.7-171114 allows authenticated remote attackers to compromise the device by sending a crafted 'hidcontact' value to the /goform/formWebAuthGlobalConfig endpoint. Exploitation requires network reachability to the web management interface and valid low-privileged credentials (CVSS PR:L), and publicly available exploit code exists; the vendor did not respond to disclosure. EPSS is 3.47% (89th percentile), indicating elevated but not top-tier risk, and no vendor-fixed firmware version has been identified.
A stack-based buffer overflow in the UTT 512W router firmware (versions up to and including 3.1.7.7-171114) lets an attacker who can reach the device's web management interface overwrite memory in the HTTP/form handler by sending an oversized 'ssid' parameter to /goform/formConfigFastDirectionW, potentially achieving arbitrary code execution with the privileges of the web service or crashing the device. Publicly available exploit code exists, and EPSS places the flaw at roughly 5.63% (93rd percentile) of exploitation likelihood in the next 30 days, although it is not listed in CISA KEV and no confirmed active exploitation has been reported. The vendor was contacted but did not respond, so no fixed firmware has been released; notably, the supplier's CVSS 4.0 vector claims an unauthenticated attack (PR:N), while our assessment rates it as requiring an authenticated administrative session (PR:L) and access to the management service, which is normally LAN-only unless remote administration is enabled.
Remote buffer overflow in UTT 512W firmware (through 3.1.7.7-171114) allows an unauthenticated network attacker to corrupt memory and potentially achieve code execution by sending a crafted request to the /goform/formNatStaticMap endpoint with an overlong NatBind parameter. Per the CVSS vectors (PR:N/UI:N), no credentials or user interaction are required, so the practical limiting factor is exposure of the device's web management interface - a LAN-only default blocks internet exploitation, while WAN-exposed or LAN-adjacent attackers can trigger it directly. Publicly available exploit code exists and EPSS places the flaw at roughly the 93rd percentile (5.72%), indicating elevated relative interest, though there is no CISA KEV entry confirming active exploitation; the vendor did not respond to the disclosure, so no vendor-released patch has been identified.
An authenticated buffer overflow in the UTT 进取 512W router firmware (up to and including version 1.7.7-171114) allows a remote attacker holding valid low-privilege credentials to overwrite memory via an oversized 'except' parameter submitted to the /goform/formP2PLimitConfig web endpoint. The flaw is a classic unbounded strcpy into a fixed-size stack buffer (CWE-119), and according to the provider's CVSS v4.0 vector (7.4) it can yield high confidentiality, integrity, and availability impact on the device. Publicly available exploit code exists (a PoC is published in the DavCloudz GitHub repository), but the vulnerability is not in CISA KEV and EPSS is low at roughly 0.16% (37th percentile), so exploitation pressure is currently limited; the vendor was contacted and did not respond, so no official patch is identified.
Stack-based buffer overflow in the UTT 512W router (firmware 1.7.7-171114) allows an authenticated, network-positioned attacker to corrupt memory by sending an overlong filename value to the FTP-server directory configuration handler at /goform/formFtpServerDirConfig, with high confidentiality, integrity and availability impact on the device itself. Exploitation requires valid credentials (CVSS vector PR:L) and network reachability of the web management interface, so devices with management restricted to a trusted LAN and non-default credentials are substantially harder to reach. Publicly available exploit code exists, but there is no CISA KEV listing and EPSS is low (0.11%, 29th percentile), and no vendor patch has been released because the vendor did not respond to disclosure.
Stack-based buffer overflow in the UTT 进取 512W router (firmware 1.7.7-171114) lets an authenticated attacker who can reach the device web management interface crash or potentially execute code on the device by submitting an oversized 'oldfilename' parameter to /goform/formFtpServerShareDirSelcet. According to the CVSS 4.0 vector the attacker must already hold valid credentials (PR:L), so the flaw is a post-authentication escalation/denial-of-service vector rather than an unauthenticated remote compromise. Publicly available exploit code exists (a GitHub PoC was published alongside the disclosure) and the report indicates the vendor was contacted but never responded, so no fixed firmware has been released; EPSS is only 0.11% (29th percentile), and the overall risk is low because exploitation requires an authenticated session and the affected device/firmware combination has a very small deployment base.
An authenticated buffer overflow in the UTT 进取 512W router firmware 1.7.7-171114 allows a user who is already logged into the web management interface to crash or potentially execute code on the device by sending a single crafted request containing an overlong addCommand parameter to /goform/formConfigCliForEngineerOnly. The flaw is a classic unchecked strcpy into a fixed-size buffer, rated 7.4 (CVSS 4.0 and our independent CVSS 3.1 assessment both agree), and it requires valid credentials (PR:L) plus network reachability to the management interface, which is normally LAN-side unless remote administration has been enabled. Publicly available exploit code exists and the vendor did not respond to the disclosure, but there is no evidence of active exploitation (not in CISA KEV) and EPSS is only 0.04% (11th percentile), so this points to a low real-world priority despite the moderate score.
Stack-based buffer overflow in the web management interface of the UTT 进取 512W router (firmware 1.7.7-171114) allows authenticated remote attackers to crash or potentially execute code on the device by sending an oversized 'Profile' argument to /goform/formRemoteControl. Exploitation requires network reachability to the router's admin web UI plus valid low-privileged credentials (the CVSS vectors for both the NVD 4.0 score and the independent 3.1 assessment specify PR:L), and publicly available exploit code exists, though there is no evidence of active exploitation (CISA KEV does not list this CVE) and EPSS is only 0.04% (11th percentile). The vendor was contacted early but never responded, so no patch has been released, and real-world risk is low despite the 7.4 CVSS 4.0 score because the product is obscure, low-deployment, and the attack is gated behind authentication.
An unsafe strcpy() in the /goform/ConfigExceptMSN handler of UTT 进取 (JinQu) 512W router firmware up to and including 1.7.7-171114 lets an authenticated remote attacker overflow a stack buffer by supplying an overlong 'remark' parameter, corrupting adjacent memory and potentially leading to code execution in the context of the device's web server. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms network reachability, low attack complexity and high confidentiality, integrity and availability impact, but also makes clear that a low-privileged authenticated session on the web UI is required - the principal limiting factor. Publicly available exploit code exists (a GitHub write-up with a PoC under the cymiao1978/cve repository), so the barrier to reproduction is low, although no CISA KEV entry indicates confirmed active exploitation in the wild; real-world risk is dominated by whether the router's management interface is exposed beyond the trusted LAN.
Authenticated buffer overflow in the UTT 进取 512W wireless router firmware (versions up to and including 1.7.7-171114) lets a remote attacker with valid low-privilege credentials corrupt memory by sending an oversized 'importpictureurl' argument to the /goform/formPictureUrl endpoint, which is copied with strcpy without a length check. Successful exploitation can give an attacker high impact across confidentiality, integrity and availability of the device - typically full compromise of the web management context or a persistent crash/reboot loop. Publicly available exploit code exists (a detailed GitHub PoC), and the flaw carries an EPSS-relevant profile as a low-complexity, network-reachable web bug, but there is no CISA KEV listing, so no confirmed active exploitation has been observed.
A stack-based buffer overflow in the web management component of UTT 进取 512W router firmware (versions up to and including 1.7.7-171114) lets an attacker who holds a valid low-privilege management session crash or potentially execute code on the device by submitting an oversized 'timestart' value to /goform/formConfigNoticeConfig, which is copied with the unbounded strcpy function. The input's CVSS vector (PR:L, UI:N) confirms authentication is required but that no user interaction is needed once a session exists, and publicly available exploit code exists - no CISA KEV entry indicates confirmed active exploitation at the time of analysis. With a CVSS 4.0 base score of 7.4 and high confidentiality, integrity, and availability impact on the device, this is a genuine but moderate-priority issue rather than a top-tier emergency, primarily limited by the authentication prerequisite, the requirement that the admin interface be reachable, and the narrow deployment base of this specific router model.
Authenticated attackers who can reach the UTT 512W router's web management interface can trigger a strcpy-based buffer overflow in the /goform/APSecurity handler by submitting an overlong value in the 'wepkey1' wireless-security parameter, corrupting memory and potentially achieving code execution with the privileges of the device's HTTP process. The flaw affects UTT 512W firmware up to and including 1.7.7-171114; the CVSS 4.0 vector (AV:N/AC:L/PR:L/UI:N, VC:H/VI:H/VA:H) confirms the attack is network-reachable but requires at least low-privilege authentication, so it is not exploitable by unauthenticated outsiders unless the admin interface is exposed with weak, default, or reused credentials. Publicly available exploit code exists (a GitHub PoC accompanies the VulDB disclosure), but there is no evidence of confirmed active exploitation (no CISA KEV listing), placing this at moderate rather than emergency priority.
Memory corruption in UTT 512W firmware up to 1.7.7-171114 allows authenticated remote attackers to compromise the device by sending a crafted 'hidcontact' value to the /goform/formWebAuthGlobalConfig endpoint. Exploitation requires network reachability to the web management interface and valid low-privileged credentials (CVSS PR:L), and publicly available exploit code exists; the vendor did not respond to disclosure. EPSS is 3.47% (89th percentile), indicating elevated but not top-tier risk, and no vendor-fixed firmware version has been identified.
A stack-based buffer overflow in the UTT 512W router firmware (versions up to and including 3.1.7.7-171114) lets an attacker who can reach the device's web management interface overwrite memory in the HTTP/form handler by sending an oversized 'ssid' parameter to /goform/formConfigFastDirectionW, potentially achieving arbitrary code execution with the privileges of the web service or crashing the device. Publicly available exploit code exists, and EPSS places the flaw at roughly 5.63% (93rd percentile) of exploitation likelihood in the next 30 days, although it is not listed in CISA KEV and no confirmed active exploitation has been reported. The vendor was contacted but did not respond, so no fixed firmware has been released; notably, the supplier's CVSS 4.0 vector claims an unauthenticated attack (PR:N), while our assessment rates it as requiring an authenticated administrative session (PR:L) and access to the management service, which is normally LAN-only unless remote administration is enabled.
Remote buffer overflow in UTT 512W firmware (through 3.1.7.7-171114) allows an unauthenticated network attacker to corrupt memory and potentially achieve code execution by sending a crafted request to the /goform/formNatStaticMap endpoint with an overlong NatBind parameter. Per the CVSS vectors (PR:N/UI:N), no credentials or user interaction are required, so the practical limiting factor is exposure of the device's web management interface - a LAN-only default blocks internet exploitation, while WAN-exposed or LAN-adjacent attackers can trigger it directly. Publicly available exploit code exists and EPSS places the flaw at roughly the 93rd percentile (5.72%), indicating elevated relative interest, though there is no CISA KEV entry confirming active exploitation; the vendor did not respond to the disclosure, so no vendor-released patch has been identified.
An authenticated buffer overflow in the UTT 进取 512W router firmware (up to and including version 1.7.7-171114) allows a remote attacker holding valid low-privilege credentials to overwrite memory via an oversized 'except' parameter submitted to the /goform/formP2PLimitConfig web endpoint. The flaw is a classic unbounded strcpy into a fixed-size stack buffer (CWE-119), and according to the provider's CVSS v4.0 vector (7.4) it can yield high confidentiality, integrity, and availability impact on the device. Publicly available exploit code exists (a PoC is published in the DavCloudz GitHub repository), but the vulnerability is not in CISA KEV and EPSS is low at roughly 0.16% (37th percentile), so exploitation pressure is currently limited; the vendor was contacted and did not respond, so no official patch is identified.