520w Firmware
Monthly
Remote command execution in UTT Aggressive HiPER 520W router firmware v1.7.7-180627 allows unauthenticated attackers to execute arbitrary system commands via crafted input to the /goform/formDia component. CVSS 9.8 severity indicates network-accessible, low-complexity exploitation requiring no authentication or user interaction. EPSS score of 0.04% (12th percentile) suggests currently low exploitation probability despite publicly available exploit code exists (GitHub POC). No vendor-released patch identified at time of analysis, presenting significant risk for exposed devices.
Unauthenticated attackers can exploit a buffer overflow in the UTT 520W Firmware's P2P configuration function via a crafted request to achieve remote code execution with high privileges. The vulnerability requires only network access and low complexity to exploit, with public exploit code already available. No patch has been released by the vendor despite early notification.
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 through a buffer overflow in the /goform/formPolicyRouteConf endpoint allows authenticated attackers to execute arbitrary commands on affected devices. Public exploit code is available for this vulnerability, and no patch has been released despite vendor notification. The flaw stems from improper bounds checking in the GroupName parameter handling.
Remote code execution in UTT 520W firmware 1.7.7-180627 allows authenticated attackers to execute arbitrary code via a buffer overflow in the ServerIp parameter of the /goform/formSyslogConf endpoint. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early disclosure attempts. The attack requires network access and valid credentials but executes with full system privileges.
Remote code execution in UTT 520W firmware through a buffer overflow in the /goform/formTimeGroupConfig endpoint allows authenticated attackers to achieve complete system compromise via manipulation of the year1 parameter. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early disclosure notification. The high CVSS score of 8.8 reflects the combination of network accessibility, low attack complexity, and full impact on confidentiality, integrity, and availability.
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 via stack buffer overflow in the /goform/formIpGroupConfig endpoint allows authenticated attackers to achieve complete system compromise. Public exploit code exists for this vulnerability, and the vendor has not provided a patch despite early disclosure notification. Affected devices are remotely exploitable with no user interaction required.
Remote code execution in UTT 520W firmware 1.7.7-180627 via a buffer overflow in the /goform/ConfigExceptAli endpoint allows authenticated attackers to execute arbitrary code with high privileges. Public exploit code exists for this vulnerability, and no patch is available from the vendor despite early disclosure notification. Affected organizations running vulnerable 520W devices should immediately isolate or replace equipment until a security update becomes available.
Remote code execution in UTT 520W firmware 1.7.7-180627 stems from a buffer overflow in the /goform/ConfigExceptMSN endpoint accessible to authenticated users. Public exploit code exists for this vulnerability, and the vendor has not released a patch despite early notification. An attacker with valid credentials can achieve complete system compromise including data theft, modification, and service disruption.
Buffer overflow in UTT 520W firmware version 1.7.7-180627 allows authenticated remote attackers to execute arbitrary code through the /goform/ConfigExceptQQ endpoint via unsafe string operations. Public exploit code is available and the vendor has not provided a patch despite early notification. This vulnerability affects confidentiality, integrity, and availability with CVSS 8.8 severity.
Remote code execution in UTT 520W firmware versions through 1.7.7-180627 stems from a buffer overflow in the /goform/formWebAuthGlobalConfig endpoint, allowing authenticated attackers to execute arbitrary code with network access. Public exploit code is available for this vulnerability, and no patches have been released despite vendor notification. The high CVSS score of 8.8 reflects full compromise of confidentiality, integrity, and availability on affected devices.
Remote code execution in UTT 520W firmware via stack-based buffer overflow in the /goform/formPictureUrl endpoint allows authenticated attackers to achieve complete system compromise. The vulnerability stems from unsafe use of strcpy() when processing the importpictureurl parameter and lacks an available patch. Public exploit code exists for this high-severity issue affecting firmware version 1.7.7-180627.
Remote code execution in UTT 520W firmware (version 1.7.7-180627) via a stack buffer overflow in the /goform/formConfigNoticeConfig endpoint allows unauthenticated attackers to execute arbitrary code with full system privileges. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. An attacker can trigger the overflow by manipulating the timestart parameter through a network request.
Remote code execution in UTT 520W Firmware 1.7.7-180627 via buffer overflow in the /goform/APSecurity endpoint allows authenticated attackers to achieve full system compromise through manipulation of the wepkey1 parameter. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. The high CVSS score of 8.8 reflects the critical nature of this remotely exploitable flaw affecting confidentiality, integrity, and availability.
Remote code execution in UTT 520W firmware 1.7.7-180627 via buffer overflow in the wireless configuration endpoint allows authenticated attackers to achieve complete system compromise with high integrity and availability impact. Public exploit code exists for this vulnerability, and the vendor has not provided a patch despite early disclosure notification. The flaw requires network access but no user interaction, making it readily exploitable in environments where administrative credentials are available or compromised.
Remote code execution in UTT 520W Firmware 1.7.7-180627 via buffer overflow in the /goform/formFireWall endpoint allows authenticated attackers to achieve full system compromise through a malicious GroupName parameter. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. The attack requires only network access and valid credentials, presenting significant risk to affected deployments.
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 allows authenticated attackers to execute arbitrary code through a buffer overflow in the /goform/formConfigFastDirectionW endpoint via the ssid parameter. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. Attackers with valid credentials can achieve complete system compromise with high impact on confidentiality, integrity, and availability.
Remote command execution in UTT Aggressive 520W v3v1.7.7-180627 via the /goform/formReleaseConnect component allows authenticated attackers with high privileges to execute arbitrary system commands through a crafted string parameter, resulting in complete system compromise (confidentiality, integrity, and availability impact). No public exploit code or active exploitation has been confirmed at the time of analysis.
Buffer overflow in UTT Aggressive 520W v3 firmware version 1.7.7-180627 allows authenticated high-privilege attackers to cause denial of service by supplying crafted input to the addCommand parameter of the formConfigCliForEngineerOnly function. The vulnerability requires administrative-level access and local network connectivity, limiting real-world attack surface despite the buffer overflow class of vulnerability.
Buffer overflow in UTT Aggressive 520W v3 v1.7.7-180627 filename parameter of formFtpServerDirConfig function allows authenticated attackers with high privileges to cause denial of service. The vulnerability requires local network access and high-level administrative credentials; no public exploit code or active exploitation has been confirmed at time of analysis.
Authenticated buffer overflow in the UTT 进取 520W router running firmware 1.7.7-180627 allows remote attackers holding low-privilege credentials to corrupt memory by sending an oversized 'timestart' parameter to the /goform/ConfigAdvideo handler, which can crash the device or potentially lead to code execution. The issue is an unbounded strcpy into a fixed buffer (CWE-119) and is rated CVSS 4.0 7.4 with high confidentiality, integrity and availability impact confined to the device (no scope change). Publicly available exploit code exists on GitHub, but there is no CISA KEV confirmation of active exploitation, EPSS is low at 0.03% (9th percentile), and the vendor did not respond to disclosure, so no vendor patch has been identified at time of analysis.
Buffer overflow in the UTT 进取 520W router running firmware 1.7.7-180627 lets a remote attacker reach the device's web management interface, and with at least low-level authenticated access to that interface, send a crafted selDateType parameter to /goform/formTaskEdit to overwrite stack memory, causing memory corruption that can lead to code execution or a device crash/denial of service. Publicly available exploit code exists (published GitHub PoC referenced by VulDB) and the vendor was contacted but never responded, so no official fix is available; EPSS is only 0.03% (9th percentile) and there is no evidence of confirmed active exploitation in CISA KEV.
Stack buffer overflow in the UTT 进取 520W router (firmware 1.7.7-180627) lets an attacker with valid web-admin credentials crash or potentially execute code on the device by sending an oversized EncryptionMode parameter to the /goform/formPptpClientConfig endpoint. Publicly available exploit code exists (a GitHub PoC walkthrough of the strcpy overflow), though EPSS is only 0.03% (7th percentile) and there is no CISA KEV listing, so real-world targeting appears minimal. The vendor was contacted about the flaw but never responded, so no official firmware fix has been identified and the model must be defended through network exposure controls and credential hygiene. This is a classic high-CVSS-but-low-real-risk profile: the assessed vector requires authenticated access (CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), which sharply limits opportunistic exploitation.
Memory corruption in the UTT 520W router firmware (version 1.7.7-180627) allows an authenticated remote attacker to overflow a stack buffer through the 'passwd1' parameter handled by /goform/formUser, which can crash the device or lead to code execution under the web server's privileges. Publicly available exploit code exists (a GitHub proof-of-concept linked from NVD), but there is no CISA KEV entry and EPSS is only 0.03% (9th percentile), indicating limited observed exploitation. The vendor was notified early and did not respond, so no vendor-released patch has been identified at time of analysis.
Remote buffer overflow in the UTT 进取 520W router firmware build 1.7.7-180627 allows an attacker who can reach the device's web management interface to corrupt memory and potentially achieve code execution or force a crash by sending an oversized 'pools' argument to the /goform/formArpBindConfig handler. The flaw is a classic unchecked strcpy in the ARP-binding configuration feature, rated CVSS 7.4 (v4.0) with high confidentiality, integrity and availability impact; the CVSS vector's PR:L component means a low-privileged authenticated web-UI session is required, which is the main limiting factor, along with the need to reach the management interface (typically LAN-only unless remote administration is exposed to the WAN). Publicly available exploit code exists (a GitHub PoC accompanies the disclosure), but there is no KEV listing and EPSS is only 0.16% (37th percentile), so current exploitation risk in the wild is low. The vendor was contacted and did not respond, so no patched firmware has been released.
Buffer overflow in UTT 520W firmware version 1.7.7-180627 allows remote authenticated attackers to cause a denial of service via crafted input to the addHostFilter parameter in the websHostFilter endpoint. Exploit code is publicly available, but no active exploitation in the wild has been confirmed.
Buffer overflow in the DNS filter configuration interface of UTT 520W firmware 1.7.7-180627 allows adjacent network attackers with low privileges to cause denial of service by submitting an overly long timeRangeName parameter. Public proof-of-concept code is available, but exploitation requires authenticated access from the local network. The vendor did not respond to disclosure and no patch is available.
Remote command execution in UTT Aggressive HiPER 520W router firmware v1.7.7-180627 allows unauthenticated attackers to execute arbitrary system commands via crafted input to the /goform/formDia component. CVSS 9.8 severity indicates network-accessible, low-complexity exploitation requiring no authentication or user interaction. EPSS score of 0.04% (12th percentile) suggests currently low exploitation probability despite publicly available exploit code exists (GitHub POC). No vendor-released patch identified at time of analysis, presenting significant risk for exposed devices.
Unauthenticated attackers can exploit a buffer overflow in the UTT 520W Firmware's P2P configuration function via a crafted request to achieve remote code execution with high privileges. The vulnerability requires only network access and low complexity to exploit, with public exploit code already available. No patch has been released by the vendor despite early notification.
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 through a buffer overflow in the /goform/formPolicyRouteConf endpoint allows authenticated attackers to execute arbitrary commands on affected devices. Public exploit code is available for this vulnerability, and no patch has been released despite vendor notification. The flaw stems from improper bounds checking in the GroupName parameter handling.
Remote code execution in UTT 520W firmware 1.7.7-180627 allows authenticated attackers to execute arbitrary code via a buffer overflow in the ServerIp parameter of the /goform/formSyslogConf endpoint. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early disclosure attempts. The attack requires network access and valid credentials but executes with full system privileges.
Remote code execution in UTT 520W firmware through a buffer overflow in the /goform/formTimeGroupConfig endpoint allows authenticated attackers to achieve complete system compromise via manipulation of the year1 parameter. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early disclosure notification. The high CVSS score of 8.8 reflects the combination of network accessibility, low attack complexity, and full impact on confidentiality, integrity, and availability.
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 via stack buffer overflow in the /goform/formIpGroupConfig endpoint allows authenticated attackers to achieve complete system compromise. Public exploit code exists for this vulnerability, and the vendor has not provided a patch despite early disclosure notification. Affected devices are remotely exploitable with no user interaction required.
Remote code execution in UTT 520W firmware 1.7.7-180627 via a buffer overflow in the /goform/ConfigExceptAli endpoint allows authenticated attackers to execute arbitrary code with high privileges. Public exploit code exists for this vulnerability, and no patch is available from the vendor despite early disclosure notification. Affected organizations running vulnerable 520W devices should immediately isolate or replace equipment until a security update becomes available.
Remote code execution in UTT 520W firmware 1.7.7-180627 stems from a buffer overflow in the /goform/ConfigExceptMSN endpoint accessible to authenticated users. Public exploit code exists for this vulnerability, and the vendor has not released a patch despite early notification. An attacker with valid credentials can achieve complete system compromise including data theft, modification, and service disruption.
Buffer overflow in UTT 520W firmware version 1.7.7-180627 allows authenticated remote attackers to execute arbitrary code through the /goform/ConfigExceptQQ endpoint via unsafe string operations. Public exploit code is available and the vendor has not provided a patch despite early notification. This vulnerability affects confidentiality, integrity, and availability with CVSS 8.8 severity.
Remote code execution in UTT 520W firmware versions through 1.7.7-180627 stems from a buffer overflow in the /goform/formWebAuthGlobalConfig endpoint, allowing authenticated attackers to execute arbitrary code with network access. Public exploit code is available for this vulnerability, and no patches have been released despite vendor notification. The high CVSS score of 8.8 reflects full compromise of confidentiality, integrity, and availability on affected devices.
Remote code execution in UTT 520W firmware via stack-based buffer overflow in the /goform/formPictureUrl endpoint allows authenticated attackers to achieve complete system compromise. The vulnerability stems from unsafe use of strcpy() when processing the importpictureurl parameter and lacks an available patch. Public exploit code exists for this high-severity issue affecting firmware version 1.7.7-180627.
Remote code execution in UTT 520W firmware (version 1.7.7-180627) via a stack buffer overflow in the /goform/formConfigNoticeConfig endpoint allows unauthenticated attackers to execute arbitrary code with full system privileges. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. An attacker can trigger the overflow by manipulating the timestart parameter through a network request.
Remote code execution in UTT 520W Firmware 1.7.7-180627 via buffer overflow in the /goform/APSecurity endpoint allows authenticated attackers to achieve full system compromise through manipulation of the wepkey1 parameter. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. The high CVSS score of 8.8 reflects the critical nature of this remotely exploitable flaw affecting confidentiality, integrity, and availability.
Remote code execution in UTT 520W firmware 1.7.7-180627 via buffer overflow in the wireless configuration endpoint allows authenticated attackers to achieve complete system compromise with high integrity and availability impact. Public exploit code exists for this vulnerability, and the vendor has not provided a patch despite early disclosure notification. The flaw requires network access but no user interaction, making it readily exploitable in environments where administrative credentials are available or compromised.
Remote code execution in UTT 520W Firmware 1.7.7-180627 via buffer overflow in the /goform/formFireWall endpoint allows authenticated attackers to achieve full system compromise through a malicious GroupName parameter. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. The attack requires only network access and valid credentials, presenting significant risk to affected deployments.
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 allows authenticated attackers to execute arbitrary code through a buffer overflow in the /goform/formConfigFastDirectionW endpoint via the ssid parameter. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. Attackers with valid credentials can achieve complete system compromise with high impact on confidentiality, integrity, and availability.
Remote command execution in UTT Aggressive 520W v3v1.7.7-180627 via the /goform/formReleaseConnect component allows authenticated attackers with high privileges to execute arbitrary system commands through a crafted string parameter, resulting in complete system compromise (confidentiality, integrity, and availability impact). No public exploit code or active exploitation has been confirmed at the time of analysis.
Buffer overflow in UTT Aggressive 520W v3 firmware version 1.7.7-180627 allows authenticated high-privilege attackers to cause denial of service by supplying crafted input to the addCommand parameter of the formConfigCliForEngineerOnly function. The vulnerability requires administrative-level access and local network connectivity, limiting real-world attack surface despite the buffer overflow class of vulnerability.
Buffer overflow in UTT Aggressive 520W v3 v1.7.7-180627 filename parameter of formFtpServerDirConfig function allows authenticated attackers with high privileges to cause denial of service. The vulnerability requires local network access and high-level administrative credentials; no public exploit code or active exploitation has been confirmed at time of analysis.
Authenticated buffer overflow in the UTT 进取 520W router running firmware 1.7.7-180627 allows remote attackers holding low-privilege credentials to corrupt memory by sending an oversized 'timestart' parameter to the /goform/ConfigAdvideo handler, which can crash the device or potentially lead to code execution. The issue is an unbounded strcpy into a fixed buffer (CWE-119) and is rated CVSS 4.0 7.4 with high confidentiality, integrity and availability impact confined to the device (no scope change). Publicly available exploit code exists on GitHub, but there is no CISA KEV confirmation of active exploitation, EPSS is low at 0.03% (9th percentile), and the vendor did not respond to disclosure, so no vendor patch has been identified at time of analysis.
Buffer overflow in the UTT 进取 520W router running firmware 1.7.7-180627 lets a remote attacker reach the device's web management interface, and with at least low-level authenticated access to that interface, send a crafted selDateType parameter to /goform/formTaskEdit to overwrite stack memory, causing memory corruption that can lead to code execution or a device crash/denial of service. Publicly available exploit code exists (published GitHub PoC referenced by VulDB) and the vendor was contacted but never responded, so no official fix is available; EPSS is only 0.03% (9th percentile) and there is no evidence of confirmed active exploitation in CISA KEV.
Stack buffer overflow in the UTT 进取 520W router (firmware 1.7.7-180627) lets an attacker with valid web-admin credentials crash or potentially execute code on the device by sending an oversized EncryptionMode parameter to the /goform/formPptpClientConfig endpoint. Publicly available exploit code exists (a GitHub PoC walkthrough of the strcpy overflow), though EPSS is only 0.03% (7th percentile) and there is no CISA KEV listing, so real-world targeting appears minimal. The vendor was contacted about the flaw but never responded, so no official firmware fix has been identified and the model must be defended through network exposure controls and credential hygiene. This is a classic high-CVSS-but-low-real-risk profile: the assessed vector requires authenticated access (CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), which sharply limits opportunistic exploitation.
Memory corruption in the UTT 520W router firmware (version 1.7.7-180627) allows an authenticated remote attacker to overflow a stack buffer through the 'passwd1' parameter handled by /goform/formUser, which can crash the device or lead to code execution under the web server's privileges. Publicly available exploit code exists (a GitHub proof-of-concept linked from NVD), but there is no CISA KEV entry and EPSS is only 0.03% (9th percentile), indicating limited observed exploitation. The vendor was notified early and did not respond, so no vendor-released patch has been identified at time of analysis.
Remote buffer overflow in the UTT 进取 520W router firmware build 1.7.7-180627 allows an attacker who can reach the device's web management interface to corrupt memory and potentially achieve code execution or force a crash by sending an oversized 'pools' argument to the /goform/formArpBindConfig handler. The flaw is a classic unchecked strcpy in the ARP-binding configuration feature, rated CVSS 7.4 (v4.0) with high confidentiality, integrity and availability impact; the CVSS vector's PR:L component means a low-privileged authenticated web-UI session is required, which is the main limiting factor, along with the need to reach the management interface (typically LAN-only unless remote administration is exposed to the WAN). Publicly available exploit code exists (a GitHub PoC accompanies the disclosure), but there is no KEV listing and EPSS is only 0.16% (37th percentile), so current exploitation risk in the wild is low. The vendor was contacted and did not respond, so no patched firmware has been released.
Buffer overflow in UTT 520W firmware version 1.7.7-180627 allows remote authenticated attackers to cause a denial of service via crafted input to the addHostFilter parameter in the websHostFilter endpoint. Exploit code is publicly available, but no active exploitation in the wild has been confirmed.
Buffer overflow in the DNS filter configuration interface of UTT 520W firmware 1.7.7-180627 allows adjacent network attackers with low privileges to cause denial of service by submitting an overly long timeRangeName parameter. Public proof-of-concept code is available, but exploitation requires authenticated access from the local network. The vendor did not respond to disclosure and no patch is available.