Utt
Monthly
Remote buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows network-reachable authenticated attackers to corrupt memory by supplying an oversized SSID value to the /goform/formConfigFastDirectionW endpoint, which calls strcpy without bounds checking on user input. Full confidentiality, integrity, and availability impact on the device is possible, potentially enabling arbitrary code execution and pivoting into the network behind the gateway. A public proof-of-concept exploit is available on GitHub; no active exploitation has been confirmed in CISA KEV at time of analysis.
Stack-based buffer overflow in UTT HiPER 1250GW firmware (≤ 3.2.7-210907-180535) exposes the device to remote code execution via a crafted HTTP request to the `/goform/aspRemoteApConfTempSend` endpoint. The unsafe `strcpy()` call processing the `Profile` parameter allows a low-privileged remote attacker to overwrite stack memory, with full confidentiality, integrity, and availability impact on both the device and downstream network systems per the CVSS 4.0 subsequent-system metrics. A public proof-of-concept is confirmed on GitHub; no public exploitation confirmed in CISA KEV at time of analysis.
Stack-based buffer overflow in UTT HiPER 1250GW firmware (versions through 3.2.7-210907-180535) allows remote, low-privilege authenticated attackers to execute arbitrary code by submitting an oversized pvid argument to the /goform/aspApBasicConfigUrcp HTTP handler endpoint. The vulnerable strcpy() call performs no bounds checking, enabling stack memory corruption including return address overwrite. A public proof-of-concept exploit is available on GitHub, and the CVSS 4.0 subsequent-system impact metrics (SC:H/SI:H/SA:H) indicate a compromised gateway can affect the confidentiality, integrity, and availability of downstream networked systems.
Stack-based buffer overflow in UTT HiPER 1200GW firmware through version 2.5.3-170306 enables remote code execution via a crafted timestart parameter submitted to the /goform/formGroupConfig endpoint. The root cause is an unbounded strcpy() call (CWE-121) in the formGroupConfig handler that overwrites stack memory without validating input length. A public proof-of-concept exploit has been published to GitHub, and the CVSS 4.0 score of 8.6 with high impact across both the vulnerable device and subsequent network systems underscores the potential for network-wide compromise through this gateway appliance.
Stack-based buffer overflow in UTT HiPER 1200GW firmware (versions up to 2.5.3-170306) enables authenticated remote attackers to corrupt stack memory via the EncryptionMode parameter in the PPTP VPN configuration endpoint, potentially achieving arbitrary code execution on the device. The root cause is unsafe use of strcpy() without bounds validation in the /goform/pptpSrvGlobalConfig handler. A public proof-of-concept exploit has been disclosed on GitHub; the vendor did not respond to coordinated disclosure, leaving no official patch available at time of analysis. No public exploit identified at time of analysis as KEV, but POC lowers the practical exploitation barrier significantly.
Stack-based buffer overflow in UTT HiPER 1200GW firmware up to v2.5.3-170306 enables network-reachable authenticated attackers to corrupt stack memory and achieve arbitrary code execution on the device. The vulnerable C runtime function strcpy in the web management endpoint /goform/ConfigAdvideo performs no bounds validation on the timestart HTTP parameter, allowing oversized input to overwrite return addresses and redirect execution flow. A public proof-of-concept exploit is available on GitHub; no vendor patch exists as UTT did not respond to the coordinated disclosure.
Stack-based buffer overflow in the UTT HiPER 1250GW firmware (all versions up to v3.2.7-210907-180535) allows authenticated remote attackers to corrupt stack memory via the tempName argument of the /goform/getOneApConfTempEntry endpoint, with potential for arbitrary code execution on the device. A public proof-of-concept exploit is available on GitHub, and the vendor did not respond to coordinated disclosure, leaving no patch path available. No CISA KEV listing exists, but the PoC availability combined with an unpatched network device significantly elevates practical risk for any exposed management interface.
Stack-based buffer overflow in UTT HiPER 1250GW firmware (all versions through 3.2.7-210907-180535) enables low-privileged remote attackers to corrupt stack memory and achieve arbitrary code execution by submitting an oversized value to the cipher parameter of the /goform/APSecurity_5g endpoint. A public proof-of-concept exploit is available on GitHub, materially increasing opportunistic abuse risk. No vendor patch exists - the vendor failed to respond to responsible disclosure - leaving no fix-based remediation path at time of analysis.
Stack-based buffer overflow in the UTT HiPER 1250GW SOHO router (firmware through 3.2.7-210907-180535) lets a network-adjacent attacker corrupt memory by supplying an oversized 'ssid' argument to the /goform/ConfigWirelessBase_5g web handler, potentially achieving code execution or a device crash. The flaw is remotely reachable via the device's web management interface and carries a CVSS 4.0 base score of 7.4 (PR:L, indicating some authentication to the web UI is expected). Publicly available exploit code exists (disclosed via VulDB and a GitHub PoC), though there is no public exploit identified as being actively used in the wild.
Stack buffer overflow in UTT HiPER 2610G routers (firmware through 3.0.0-171107) allows authenticated remote attackers to corrupt memory by submitting an oversized GroupName parameter to the /goform/formConfigDnsFilterGlobal endpoint, which passes the input to an unsafe strcpy call. Publicly available exploit code exists (disclosed via VulDB and a GitHub PoC), and successful exploitation can compromise confidentiality, integrity, and availability of the device - typically meaning router takeover or denial of service. The issue is not listed in CISA KEV, so it is not confirmed actively exploited at this time.
Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows authenticated remote attackers to corrupt memory via the Profile parameter in the /goform/formFireWall endpoint, where unsafe strcpy usage processes the input. Publicly available exploit code exists, increasing the realistic risk of attempted compromise against exposed management interfaces. No CISA KEV listing has been published, so exploitation is not yet confirmed active in the wild.
Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware versions up to 2.5.3-170306) allows remote authenticated attackers to corrupt memory via the strcpy function in the /goform/formTaskEdit endpoint. Publicly available exploit code exists, raising the practical risk despite the requirement for low-level privileges. No KEV listing or EPSS data is provided in the input, so widespread automated exploitation has not been confirmed.
Remote code execution risk in the UTT HiPER 1250GW router (firmware up to 3.2.7-210907-180535) stems from an unbounded strcpy in the ConfigAdvideo web handler, where an oversized 'Profile' parameter overflows a stack buffer. Authenticated remote attackers (CVSS 4.0 PR:L) can crash the device or potentially hijack execution flow, achieving total impact on confidentiality, integrity, and availability. Publicly available exploit code exists per VulDB, though EPSS remains very low (0.04%) and there is no public exploit identified as actively used in the wild.
Stack buffer overflow in the UTT HiPER 1250GW gateway/router (firmware up to 3.2.7-210907-180535) lets a low-privileged authenticated attacker corrupt memory by supplying an oversized 'Profile' parameter to the formTaskEdit_ap web handler, which copies it via an unbounded strcpy(). The flaw is remotely reachable over the device's management interface and publicly available exploit code exists, though it is not listed in CISA KEV and carries a very low EPSS score (0.04%). Successful exploitation can crash the device or potentially execute attacker-controlled code with the privileges of the web server process.
Stack buffer overflow in the UTT HiPER 1250GW enterprise router (firmware up to 3.2.7-210907-180535) allows an authenticated attacker to corrupt memory by supplying an oversized Profile parameter to the route/goform/NTP web handler, which passes it to an unbounded strcpy(). The flaw is remotely reachable over the management interface and publicly available exploit code exists, though it is not listed in CISA KEV and carries a very low EPSS score (0.04%). Successful exploitation yields total compromise of confidentiality, integrity, and availability on the device.
Buffer overflow in UTT HiPER 1200GW router versions up to 2.5.3-170306 enables remote authenticated attackers to execute arbitrary code with high privileges via malformed NatBind parameters to the /goform/formNatStaticMap endpoint. Publicly available exploit code exists (GitHub POC published), significantly lowering exploitation barrier. EPSS data not available, but combination of network attack vector, low complexity (CVSS AC:L), and public POC indicates elevated real-world exploitation risk for internet-facing devices with weak credential protection.
Remote command execution in UTT Aggressive HiPER 520W router firmware v1.7.7-180627 allows unauthenticated attackers to execute arbitrary system commands via crafted input to the /goform/formDia component. CVSS 9.8 severity indicates network-accessible, low-complexity exploitation requiring no authentication or user interaction. EPSS score of 0.04% (12th percentile) suggests currently low exploitation probability despite publicly available exploit code exists (GitHub POC). No vendor-released patch identified at time of analysis, presenting significant risk for exposed devices.
Buffer overflow in UTT HiPER 1250GW router firmware (versions ≤3.2.7-210907-180535) allows authenticated remote attackers to achieve arbitrary code execution with high confidentiality, integrity, and availability impact. The vulnerability resides in the strcpy function within /goform/formNatStaticMap endpoint, where manipulation of the NatBind parameter triggers memory corruption. Publicly available exploit code exists (GitHub POC published), significantly lowering exploitation barriers for threat actors with valid credentials. CVSS 8.8 severity reflects network-based attack vector with low complexity, though low-privilege authentication is required, reducing immediate internet-scale exploitation risk.
Stack-based buffer overflow in UTT HiPER 1250GW router (versions up to 3.2.7-210907-180535) allows authenticated remote attackers to achieve arbitrary code execution with high integrity and availability impact via malformed Profile parameter in /goform/formRemoteControl endpoint. Publicly available exploit code exists. CVSS 8.8 reflects network accessibility with low attack complexity, though authentication requirement (PR:L) moderately reduces immediate exploit surface. No CISA KEV listing indicates exploitation remains proof-of-concept stage rather than widespread campaign activity.
Buffer overflow in UTT HiPER 1250GW firmware versions up to 3.2.7-210907-180535 allows authenticated remote attackers to achieve code execution through a malformed GroupName parameter in the DNS filter configuration handler. Public exploit code exists for this vulnerability and no patch is currently available. Affected organizations should restrict network access to administrative interfaces until remediation is possible.
Remote code execution in UTT HiPER 1250GW firmware versions up to 3.2.7 allows authenticated attackers to overflow a buffer in the /goform/setSysAdm function via a malicious GroupName parameter. Public exploit code exists for this vulnerability, and no patch is currently available. An attacker with valid credentials can achieve complete system compromise including code execution, data theft, and denial of service.
Unauthenticated attackers can trigger a buffer overflow in UTT HiPER 1200GW firmware versions up to 2.5.3-170306 via the /goform/websHostFilter endpoint, enabling remote code execution with full system compromise. Public exploit code is available and there is currently no patch, leaving affected devices at immediate risk. The vulnerability requires only network access and valid credentials to exploit, making it readily actionable for threat actors.
Remote code execution in UTT HiPER 810G up to version 1.7.7-171114 through a buffer overflow in the /goform/formApLbConfig endpoint allows authenticated attackers to achieve complete system compromise. The vulnerability stems from unsafe use of strcpy() on the loadBalanceNameOld parameter, and public exploit code is currently available. No patch has been released for affected devices.
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-1711 via a buffer overflow in the /goform/formApMail handler allows authenticated attackers to achieve complete system compromise. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected devices at elevated risk. The attack requires network access but no user interaction, making it a significant threat to organizations using this device.
Unauthenticated remote attackers can achieve complete system compromise (code execution, data theft, and denial of service) against UTT HiPER 810G firmware versions up to 1.7.7-1711 through a buffer overflow in the /goform/getOneApConfTempEntry endpoint. Public exploit code is available and actively being leveraged in attacks. No patch is currently available for affected devices.
Remote code execution in UTT HiPER 810G firmware up to version 1.7.7-171114 through a stack buffer overflow in the DNS filter configuration function allows authenticated attackers to execute arbitrary commands with full system privileges. Public exploit code is available for this vulnerability, increasing the risk of active exploitation. No patch is currently available, requiring organizations to implement network-level mitigations or device replacement until a fix is released.
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 stems from an unsafe strcpy operation in the /goform/formRemoteControl function that enables unauthenticated attackers to trigger a buffer overflow. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected devices at immediate risk.
A buffer overflow in the NTP configuration handler of UTT HiPER 810G firmware versions up to 1.7.7-171114 enables authenticated remote attackers to achieve complete system compromise through memory corruption. Public exploit code exists for this vulnerability, and no patch is currently available. Affected devices face immediate risk of remote code execution with high privileges from any authenticated user.
Remote code execution in UTT HiPER 810G firmware versions up to 1.7.7-171114 allows authenticated attackers to achieve full system compromise through a buffer overflow in the P2P limit configuration function. The vulnerability exists due to unsafe use of strcpy() in the /goform/formP2PLimitConfig endpoint and is exploitable over the network with public exploit code currently available. No patch has been released, making this a critical risk for deployed devices.
Buffer overflow in UTT HiPER 810G firmware versions up to 1.7.7-171114 allows authenticated remote attackers to achieve code execution by supplying an oversized GroupName parameter to the /goform/formPolicyRouteConf endpoint. Public exploit code exists for this vulnerability and no patch is currently available.
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-1711 allows authenticated remote attackers to execute arbitrary code by exploiting a buffer overflow in the /goform/formTaskEdit_ap endpoint. An attacker can trigger the vulnerability by crafting a malicious txtMin2 parameter that overflows the strcpy function, and public exploit code exists for this flaw. No patch is currently available for affected devices.
Buffer overflow in UTT HiPER 810G firmware versions up to 1.7.7-1711 allows remote attackers with high privileges to execute arbitrary code through the passwd1 parameter in the /goform/setSysAdm function. Public exploit code exists for this vulnerability and no patch is currently available. An authenticated attacker can leverage this flaw to achieve complete system compromise with high impact on confidentiality, integrity, and availability.
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 allows unauthenticated attackers to overflow a buffer via the remark parameter in the /goform/ConfigExceptMSN endpoint. Public exploit code is available and no patch has been released, creating immediate risk for exposed devices.
Unauthenticated remote attackers can achieve complete system compromise through a buffer overflow in the UTT HiPER 810G firmware's /goform/ConfigExceptAli endpoint via unsafe string handling. Public exploit code is available for this vulnerability, increasing exploitation risk for unpatched devices. The flaw requires only network access and affects firmware version 1.7.7-171114 with no patch currently available.
Remote code execution in UTT HiPER 520 Firmware 1.7.7-160105 allows unauthenticated attackers to inject arbitrary OS commands through the Isp_Name parameter in the web management interface. Public exploit code exists for this vulnerability, and no patch is currently available. An attacker can achieve full system compromise by sending a specially crafted request to the /goform/formReleaseConnect endpoint.
Remote command injection in UTT HiPer 520 Firmware 1.7.7-160105 web management interface allows unauthenticated attackers to execute arbitrary OS commands through the policyNames parameter. Public exploit code exists for this vulnerability, increasing risk of active exploitation. No patch is currently available.
Remote code execution in UTT 521G firmware 3.1.1-190816 allows unauthenticated attackers to inject arbitrary OS commands through the policyNames parameter in the /goform/formPdbUpConfig endpoint. Public exploit code exists for this vulnerability, and no patch is currently available. Affected organizations using this device should immediately implement network segmentation or disable remote access until a fix is released.
521G Firmware versions up to 3.1.1-190816 contains a vulnerability that allows attackers to command injection (CVSS 7.2).
810 Firmware versions up to 1.7.4-141218 contains a vulnerability that allows attackers to command injection (CVSS 7.2).
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 allows authenticated attackers to achieve full system compromise via a buffer overflow in the Management Interface firewall configuration function. Public exploit code exists for this vulnerability, and no patch is available from the vendor despite early disclosure notification. The attack requires valid credentials but can be executed over the network without user interaction.
Remote code execution in UTT HiPER 810 Firmware 1.7.4-141218 via command injection in the user administration function allows unauthenticated attackers to execute arbitrary commands over the network. The vulnerability exists in the passwd1 parameter of the /goform/formUser endpoint and has public exploit code available. No patch is currently available from the vendor, who has been unresponsive to disclosure attempts.
Unauthenticated attackers can exploit a buffer overflow in the UTT 520W Firmware's P2P configuration function via a crafted request to achieve remote code execution with high privileges. The vulnerability requires only network access and low complexity to exploit, with public exploit code already available. No patch has been released by the vendor despite early notification.
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 through a buffer overflow in the /goform/formPolicyRouteConf endpoint allows authenticated attackers to execute arbitrary commands on affected devices. Public exploit code is available for this vulnerability, and no patch has been released despite vendor notification. The flaw stems from improper bounds checking in the GroupName parameter handling.
Remote code execution in UTT 520W firmware 1.7.7-180627 allows authenticated attackers to execute arbitrary code via a buffer overflow in the ServerIp parameter of the /goform/formSyslogConf endpoint. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early disclosure attempts. The attack requires network access and valid credentials but executes with full system privileges.
Remote code execution in UTT 520W firmware through a buffer overflow in the /goform/formTimeGroupConfig endpoint allows authenticated attackers to achieve complete system compromise via manipulation of the year1 parameter. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early disclosure notification. The high CVSS score of 8.8 reflects the combination of network accessibility, low attack complexity, and full impact on confidentiality, integrity, and availability.
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 via stack buffer overflow in the /goform/formIpGroupConfig endpoint allows authenticated attackers to achieve complete system compromise. Public exploit code exists for this vulnerability, and the vendor has not provided a patch despite early disclosure notification. Affected devices are remotely exploitable with no user interaction required.
UTT HiPER 810 router firmware 1.7.4 has a stack buffer overflow in the /goform/setNat endpoint's strcpy function, enabling remote attackers to execute arbitrary code.
Remote code execution in UTT 520W firmware 1.7.7-180627 via a buffer overflow in the /goform/ConfigExceptAli endpoint allows authenticated attackers to execute arbitrary code with high privileges. Public exploit code exists for this vulnerability, and no patch is available from the vendor despite early disclosure notification. Affected organizations running vulnerable 520W devices should immediately isolate or replace equipment until a security update becomes available.
Remote code execution in UTT 520W firmware 1.7.7-180627 stems from a buffer overflow in the /goform/ConfigExceptMSN endpoint accessible to authenticated users. Public exploit code exists for this vulnerability, and the vendor has not released a patch despite early notification. An attacker with valid credentials can achieve complete system compromise including data theft, modification, and service disruption.
Buffer overflow in UTT 520W firmware version 1.7.7-180627 allows authenticated remote attackers to execute arbitrary code through the /goform/ConfigExceptQQ endpoint via unsafe string operations. Public exploit code is available and the vendor has not provided a patch despite early notification. This vulnerability affects confidentiality, integrity, and availability with CVSS 8.8 severity.
Remote code execution in UTT 520W firmware versions through 1.7.7-180627 stems from a buffer overflow in the /goform/formWebAuthGlobalConfig endpoint, allowing authenticated attackers to execute arbitrary code with network access. Public exploit code is available for this vulnerability, and no patches have been released despite vendor notification. The high CVSS score of 8.8 reflects full compromise of confidentiality, integrity, and availability on affected devices.
Remote code execution in UTT 520W firmware via stack-based buffer overflow in the /goform/formPictureUrl endpoint allows authenticated attackers to achieve complete system compromise. The vulnerability stems from unsafe use of strcpy() when processing the importpictureurl parameter and lacks an available patch. Public exploit code exists for this high-severity issue affecting firmware version 1.7.7-180627.
Remote code execution in UTT 520W firmware (version 1.7.7-180627) via a stack buffer overflow in the /goform/formConfigNoticeConfig endpoint allows unauthenticated attackers to execute arbitrary code with full system privileges. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. An attacker can trigger the overflow by manipulating the timestart parameter through a network request.
Remote code execution in UTT 520W Firmware 1.7.7-180627 via buffer overflow in the /goform/APSecurity endpoint allows authenticated attackers to achieve full system compromise through manipulation of the wepkey1 parameter. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. The high CVSS score of 8.8 reflects the critical nature of this remotely exploitable flaw affecting confidentiality, integrity, and availability.
Remote code execution in UTT 520W firmware 1.7.7-180627 via buffer overflow in the wireless configuration endpoint allows authenticated attackers to achieve complete system compromise with high integrity and availability impact. Public exploit code exists for this vulnerability, and the vendor has not provided a patch despite early disclosure notification. The flaw requires network access but no user interaction, making it readily exploitable in environments where administrative credentials are available or compromised.
Remote code execution in UTT 520W Firmware 1.7.7-180627 via buffer overflow in the /goform/formFireWall endpoint allows authenticated attackers to achieve full system compromise through a malicious GroupName parameter. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. The attack requires only network access and valid credentials, presenting significant risk to affected deployments.
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 allows authenticated attackers to execute arbitrary code through a buffer overflow in the /goform/formConfigFastDirectionW endpoint via the ssid parameter. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. Attackers with valid credentials can achieve complete system compromise with high impact on confidentiality, integrity, and availability.
Buffer overflow in UTT HiPER 2610G firmware (up to 3.0.0-171107) enables an authenticated, adjacent-network attacker to corrupt memory via an unsafe strcpy call in the web management NAT static mapping form handler. By supplying an oversized NatBinds argument to /goform/formNatStaticMap, an attacker can achieve low-level impacts across confidentiality, integrity, and availability on the targeted device. No KEV listing is present, but a public proof-of-concept is confirmed on GitHub, materially lowering the exploitation barrier for any attacker already on the local network.
Remote command execution in UTT Aggressive 520W v3v1.7.7-180627 via the /goform/formReleaseConnect component allows authenticated attackers with high privileges to execute arbitrary system commands through a crafted string parameter, resulting in complete system compromise (confidentiality, integrity, and availability impact). No public exploit code or active exploitation has been confirmed at the time of analysis.
Buffer overflow in UTT Aggressive HiPER 810G v3 v1.7.7-171114 formTaskEdit function allows authenticated administrators to cause denial of service through a malformed selDateType parameter. The vulnerability is a classic stack-based buffer overflow (CWE-120) requiring high-privilege local network access; no public exploitation framework has been identified, and CVSS 4.5 reflects the limited scope (DoS only, no code execution or information disclosure).
Buffer overflow in UTT Aggressive 520W v3 firmware version 1.7.7-180627 allows authenticated high-privilege attackers to cause denial of service by supplying crafted input to the addCommand parameter of the formConfigCliForEngineerOnly function. The vulnerability requires administrative-level access and local network connectivity, limiting real-world attack surface despite the buffer overflow class of vulnerability.
Buffer overflow in UTT Aggressive HiPER 1200GW v2.5.3-170306 formArpBindConfig function allows authenticated attackers with high privileges to cause denial of service by supplying a crafted input to the pools parameter. CVSS score of 4.5 reflects limited attack surface (local network access required) and high privilege requirement, though impact is complete availability loss. No public exploit code or active exploitation confirmed at time of analysis.
Buffer overflow in UTT Aggressive 520W v3 v1.7.7-180627 filename parameter of formFtpServerDirConfig function allows authenticated attackers with high privileges to cause denial of service. The vulnerability requires local network access and high-level administrative credentials; no public exploit code or active exploitation has been confirmed at time of analysis.
Buffer overflow in UTT Aggressive HiPER 810G v3 v1.7.7-171114 ConfigAdvideo function allows authenticated local attackers with high privileges to cause denial of service by crafting malicious input to the timestart parameter. The vulnerability scores low-to-moderate risk (CVSS 4.5) due to strict prerequisites: network access limited to adjacent network only, high privilege requirement, and impact restricted to availability.
Buffer overflow in UTT Aggressive HiPER 810G v3 version 1.7.7-171114 within the notes parameter of the formGroupConfig function enables authenticated administrators to trigger a denial of service condition through a crafted input. The vulnerability requires high-privilege access and cannot result in code execution, but represents a threat to device availability. No public exploit code has been independently confirmed, and this CVE does not appear on the CISA KEV catalog at time of analysis.
Buffer overflow in UTT Aggressive HiPER 1200GW v2.5.3-170306 timeRangeName parameter allows authenticated attackers with high privileges to cause denial of service through crafted input to the formConfigDnsFilterGlobal function. CVSS score of 4.5 reflects local/adjacent network attack vector and high-privilege requirement, with no confidentiality or integrity impact. No public exploit code or active exploitation confirmed at time of analysis.
Insecure default telnet credentials in UTT HiPER 810 router firmware v1.5.0. Default credentials are publicly known, enabling unauthenticated access to the router management. PoC available.
Command injection in UTT HiPER 810 Firmware version 1.7.4-141218 allows authenticated remote attackers to execute arbitrary commands through manipulation of the policyNames parameter in the /goform/formPdbUpConfig endpoint. Public exploit code exists for this vulnerability, and no patch is currently available. Attackers with login credentials can achieve code execution with minimal complexity.
Authenticated buffer overflow in the UTT 进取 520W router running firmware 1.7.7-180627 allows remote attackers holding low-privilege credentials to corrupt memory by sending an oversized 'timestart' parameter to the /goform/ConfigAdvideo handler, which can crash the device or potentially lead to code execution. The issue is an unbounded strcpy into a fixed buffer (CWE-119) and is rated CVSS 4.0 7.4 with high confidentiality, integrity and availability impact confined to the device (no scope change). Publicly available exploit code exists on GitHub, but there is no CISA KEV confirmation of active exploitation, EPSS is low at 0.03% (9th percentile), and the vendor did not respond to disclosure, so no vendor patch has been identified at time of analysis.
Buffer overflow in the UTT 进取 520W router running firmware 1.7.7-180627 lets a remote attacker reach the device's web management interface, and with at least low-level authenticated access to that interface, send a crafted selDateType parameter to /goform/formTaskEdit to overwrite stack memory, causing memory corruption that can lead to code execution or a device crash/denial of service. Publicly available exploit code exists (published GitHub PoC referenced by VulDB) and the vendor was contacted but never responded, so no official fix is available; EPSS is only 0.03% (9th percentile) and there is no evidence of confirmed active exploitation in CISA KEV.
Stack buffer overflow in the UTT 进取 520W router (firmware 1.7.7-180627) lets an attacker with valid web-admin credentials crash or potentially execute code on the device by sending an oversized EncryptionMode parameter to the /goform/formPptpClientConfig endpoint. Publicly available exploit code exists (a GitHub PoC walkthrough of the strcpy overflow), though EPSS is only 0.03% (7th percentile) and there is no CISA KEV listing, so real-world targeting appears minimal. The vendor was contacted about the flaw but never responded, so no official firmware fix has been identified and the model must be defended through network exposure controls and credential hygiene. This is a classic high-CVSS-but-low-real-risk profile: the assessed vector requires authenticated access (CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), which sharply limits opportunistic exploitation.
Memory corruption in the UTT 520W router firmware (version 1.7.7-180627) allows an authenticated remote attacker to overflow a stack buffer through the 'passwd1' parameter handled by /goform/formUser, which can crash the device or lead to code execution under the web server's privileges. Publicly available exploit code exists (a GitHub proof-of-concept linked from NVD), but there is no CISA KEV entry and EPSS is only 0.03% (9th percentile), indicating limited observed exploitation. The vendor was notified early and did not respond, so no vendor-released patch has been identified at time of analysis.
Stack-based buffer overflow in the UTT 512W router (firmware 1.7.7-171114) allows an authenticated, network-positioned attacker to corrupt memory by sending an overlong filename value to the FTP-server directory configuration handler at /goform/formFtpServerDirConfig, with high confidentiality, integrity and availability impact on the device itself. Exploitation requires valid credentials (CVSS vector PR:L) and network reachability of the web management interface, so devices with management restricted to a trusted LAN and non-default credentials are substantially harder to reach. Publicly available exploit code exists, but there is no CISA KEV listing and EPSS is low (0.11%, 29th percentile), and no vendor patch has been released because the vendor did not respond to disclosure.
Stack-based buffer overflow in the UTT 进取 512W router (firmware 1.7.7-171114) lets an authenticated attacker who can reach the device web management interface crash or potentially execute code on the device by submitting an oversized 'oldfilename' parameter to /goform/formFtpServerShareDirSelcet. According to the CVSS 4.0 vector the attacker must already hold valid credentials (PR:L), so the flaw is a post-authentication escalation/denial-of-service vector rather than an unauthenticated remote compromise. Publicly available exploit code exists (a GitHub PoC was published alongside the disclosure) and the report indicates the vendor was contacted but never responded, so no fixed firmware has been released; EPSS is only 0.11% (29th percentile), and the overall risk is low because exploitation requires an authenticated session and the affected device/firmware combination has a very small deployment base.
An authenticated buffer overflow in the UTT 进取 512W router firmware 1.7.7-171114 allows a user who is already logged into the web management interface to crash or potentially execute code on the device by sending a single crafted request containing an overlong addCommand parameter to /goform/formConfigCliForEngineerOnly. The flaw is a classic unchecked strcpy into a fixed-size buffer, rated 7.4 (CVSS 4.0 and our independent CVSS 3.1 assessment both agree), and it requires valid credentials (PR:L) plus network reachability to the management interface, which is normally LAN-side unless remote administration has been enabled. Publicly available exploit code exists and the vendor did not respond to the disclosure, but there is no evidence of active exploitation (not in CISA KEV) and EPSS is only 0.04% (11th percentile), so this points to a low real-world priority despite the moderate score.
Stack-based buffer overflow in the web management interface of the UTT 进取 512W router (firmware 1.7.7-171114) allows authenticated remote attackers to crash or potentially execute code on the device by sending an oversized 'Profile' argument to /goform/formRemoteControl. Exploitation requires network reachability to the router's admin web UI plus valid low-privileged credentials (the CVSS vectors for both the NVD 4.0 score and the independent 3.1 assessment specify PR:L), and publicly available exploit code exists, though there is no evidence of active exploitation (CISA KEV does not list this CVE) and EPSS is only 0.04% (11th percentile). The vendor was contacted early but never responded, so no patch has been released, and real-world risk is low despite the 7.4 CVSS 4.0 score because the product is obscure, low-deployment, and the attack is gated behind authentication.
An unsafe strcpy() in the /goform/ConfigExceptMSN handler of UTT 进取 (JinQu) 512W router firmware up to and including 1.7.7-171114 lets an authenticated remote attacker overflow a stack buffer by supplying an overlong 'remark' parameter, corrupting adjacent memory and potentially leading to code execution in the context of the device's web server. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms network reachability, low attack complexity and high confidentiality, integrity and availability impact, but also makes clear that a low-privileged authenticated session on the web UI is required - the principal limiting factor. Publicly available exploit code exists (a GitHub write-up with a PoC under the cymiao1978/cve repository), so the barrier to reproduction is low, although no CISA KEV entry indicates confirmed active exploitation in the wild; real-world risk is dominated by whether the router's management interface is exposed beyond the trusted LAN.
A stack-based buffer overflow in the web management component of UTT 进取 512W router firmware (versions up to and including 1.7.7-171114) lets an attacker who holds a valid low-privilege management session crash or potentially execute code on the device by submitting an oversized 'timestart' value to /goform/formConfigNoticeConfig, which is copied with the unbounded strcpy function. The input's CVSS vector (PR:L, UI:N) confirms authentication is required but that no user interaction is needed once a session exists, and publicly available exploit code exists - no CISA KEV entry indicates confirmed active exploitation at the time of analysis. With a CVSS 4.0 base score of 7.4 and high confidentiality, integrity, and availability impact on the device, this is a genuine but moderate-priority issue rather than a top-tier emergency, primarily limited by the authentication prerequisite, the requirement that the admin interface be reachable, and the narrow deployment base of this specific router model.
Authenticated attackers who can reach the UTT 512W router's web management interface can trigger a strcpy-based buffer overflow in the /goform/APSecurity handler by submitting an overlong value in the 'wepkey1' wireless-security parameter, corrupting memory and potentially achieving code execution with the privileges of the device's HTTP process. The flaw affects UTT 512W firmware up to and including 1.7.7-171114; the CVSS 4.0 vector (AV:N/AC:L/PR:L/UI:N, VC:H/VI:H/VA:H) confirms the attack is network-reachable but requires at least low-privilege authentication, so it is not exploitable by unauthenticated outsiders unless the admin interface is exposed with weak, default, or reused credentials. Publicly available exploit code exists (a GitHub PoC accompanies the VulDB disclosure), but there is no evidence of confirmed active exploitation (no CISA KEV listing), placing this at moderate rather than emergency priority.
A stack-based buffer overflow in the UTT 512W router firmware (versions up to and including 3.1.7.7-171114) lets an attacker who can reach the device's web management interface overwrite memory in the HTTP/form handler by sending an oversized 'ssid' parameter to /goform/formConfigFastDirectionW, potentially achieving arbitrary code execution with the privileges of the web service or crashing the device. Publicly available exploit code exists, and EPSS places the flaw at roughly 5.63% (93rd percentile) of exploitation likelihood in the next 30 days, although it is not listed in CISA KEV and no confirmed active exploitation has been reported. The vendor was contacted but did not respond, so no fixed firmware has been released; notably, the supplier's CVSS 4.0 vector claims an unauthenticated attack (PR:N), while our assessment rates it as requiring an authenticated administrative session (PR:L) and access to the management service, which is normally LAN-only unless remote administration is enabled.
Remote buffer overflow in UTT 512W firmware (through 3.1.7.7-171114) allows an unauthenticated network attacker to corrupt memory and potentially achieve code execution by sending a crafted request to the /goform/formNatStaticMap endpoint with an overlong NatBind parameter. Per the CVSS vectors (PR:N/UI:N), no credentials or user interaction are required, so the practical limiting factor is exposure of the device's web management interface - a LAN-only default blocks internet exploitation, while WAN-exposed or LAN-adjacent attackers can trigger it directly. Publicly available exploit code exists and EPSS places the flaw at roughly the 93rd percentile (5.72%), indicating elevated relative interest, though there is no CISA KEV entry confirming active exploitation; the vendor did not respond to the disclosure, so no vendor-released patch has been identified.
Buffer overflow in UTT 520W firmware version 1.7.7-180627 allows remote authenticated attackers to cause a denial of service via crafted input to the addHostFilter parameter in the websHostFilter endpoint. Exploit code is publicly available, but no active exploitation in the wild has been confirmed.
Buffer overflow in the DNS filter configuration interface of UTT 520W firmware 1.7.7-180627 allows adjacent network attackers with low privileges to cause denial of service by submitting an overly long timeRangeName parameter. Public proof-of-concept code is available, but exploitation requires authenticated access from the local network. The vendor did not respond to disclosure and no patch is available.
A security vulnerability has been detected in UTT 进取 750W up to 3.2.2-191225. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Remote buffer overflow in UTT HiPER 2620G firmware up to 3.1.4 enables an attacker with a low-privilege authenticated session on the web management interface to corrupt memory via the /goform/fNTP NTPServerIP parameter, potentially achieving high confidentiality, integrity, and availability impact. Publicly available exploit code exists, but there is no confirmed active exploitation (CISA KEV) and the EPSS score is low at 0.75% (54th percentile). The vendor did not respond to the disclosure, and no vendor-released patch is identified in the provided data.
A buffer overflow in the UTT 518G router firmware (up to V3v3.2.7-210919-161313) is reachable through the authenticated web management endpoint /goform/formTaskEdit_ap, where an oversized txtMin2 argument overwrites memory and can lead to high-integrity/high-availability impact on the device, with the assessed CVSS 3.1 base score of 8.8 and the vendor-published CVSS 4.0 score of 7.4. The CVSS 4.0/3.1 vectors both carry PR:L, meaning the attacker must already hold at least low-level credentials on the router, so the practical exposure is limited to users who can log in to the web console rather than any remote unauthenticated party on the internet. Publicly available exploit code exists (linked from a GitHub PoC write-up), but there is no CISA KEV listing and EPSS is only 0.84% (56th percentile), so signals are mixed and this is a real but limited-priority issue.
An authenticated buffer overflow in the UTT 1250GW gateway firmware (all builds through v2v3.2.2-200710) lets an attacker with a low-privilege session on the device's web management interface send an oversized pvid parameter to /goform/aspChangeChannel, corrupting memory on the stack via an unchecked strcpy and potentially achieving full code execution on the gateway. Exploitation is remote and low-complexity with no user interaction, but is gated by the need for prior authentication (CVSS PR:L), which is the main limiting factor. Publicly available exploit code exists on GitHub, and although the vendor was contacted early, no response or fixed firmware version has been published.
A buffer overflow in the UTT 1250GW router firmware (up to v2v3.2.2-200710) lets attackers who already hold valid low-privilege credentials crash or potentially execute code on the device by sending an oversized Username parameter to the /goform/formUserStatusRemark web endpoint over the network - no user interaction is required. Publicly available exploit code exists (a proof-of-concept was disclosed via a GitHub issue referenced by NVD), which raises the practical likelihood of exploitation, though the EPSS score of 0.75% (54th percentile) and the requirement for prior authentication indicate limited mass-exploitation urgency rather than an imminent, unauthenticated internet-wide threat. The vendor was contacted early about the disclosure but did not respond, so no vendor-released patch is identified and the exposure window remains open for anyone running the affected firmware with a reachable management interface.
Buffer overflow in UTT HiPER 840G firmware through 3.1.1-190328 allows an authenticated remote attacker to corrupt memory and potentially execute code on the device by sending an overlong txtMin2 argument to the /goform/formTaskEdit web endpoint. Exploitation requires reachability of the HiPER 840G web management interface plus a valid session with at least low privileges (CVSS PR:L), and publicly available exploit code exists, though there is no confirmed active exploitation (CISA KEV). EPSS is modest at 0.97% (61st percentile), and because the vendor was contacted early but never responded, no vendor-released patch has been identified at time of analysis.
A security vulnerability has been detected in UTT 1200GW and 1250GW up to 3.0.0-170831/3.2.2-200710. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Remote buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows network-reachable authenticated attackers to corrupt memory by supplying an oversized SSID value to the /goform/formConfigFastDirectionW endpoint, which calls strcpy without bounds checking on user input. Full confidentiality, integrity, and availability impact on the device is possible, potentially enabling arbitrary code execution and pivoting into the network behind the gateway. A public proof-of-concept exploit is available on GitHub; no active exploitation has been confirmed in CISA KEV at time of analysis.
Stack-based buffer overflow in UTT HiPER 1250GW firmware (≤ 3.2.7-210907-180535) exposes the device to remote code execution via a crafted HTTP request to the `/goform/aspRemoteApConfTempSend` endpoint. The unsafe `strcpy()` call processing the `Profile` parameter allows a low-privileged remote attacker to overwrite stack memory, with full confidentiality, integrity, and availability impact on both the device and downstream network systems per the CVSS 4.0 subsequent-system metrics. A public proof-of-concept is confirmed on GitHub; no public exploitation confirmed in CISA KEV at time of analysis.
Stack-based buffer overflow in UTT HiPER 1250GW firmware (versions through 3.2.7-210907-180535) allows remote, low-privilege authenticated attackers to execute arbitrary code by submitting an oversized pvid argument to the /goform/aspApBasicConfigUrcp HTTP handler endpoint. The vulnerable strcpy() call performs no bounds checking, enabling stack memory corruption including return address overwrite. A public proof-of-concept exploit is available on GitHub, and the CVSS 4.0 subsequent-system impact metrics (SC:H/SI:H/SA:H) indicate a compromised gateway can affect the confidentiality, integrity, and availability of downstream networked systems.
Stack-based buffer overflow in UTT HiPER 1200GW firmware through version 2.5.3-170306 enables remote code execution via a crafted timestart parameter submitted to the /goform/formGroupConfig endpoint. The root cause is an unbounded strcpy() call (CWE-121) in the formGroupConfig handler that overwrites stack memory without validating input length. A public proof-of-concept exploit has been published to GitHub, and the CVSS 4.0 score of 8.6 with high impact across both the vulnerable device and subsequent network systems underscores the potential for network-wide compromise through this gateway appliance.
Stack-based buffer overflow in UTT HiPER 1200GW firmware (versions up to 2.5.3-170306) enables authenticated remote attackers to corrupt stack memory via the EncryptionMode parameter in the PPTP VPN configuration endpoint, potentially achieving arbitrary code execution on the device. The root cause is unsafe use of strcpy() without bounds validation in the /goform/pptpSrvGlobalConfig handler. A public proof-of-concept exploit has been disclosed on GitHub; the vendor did not respond to coordinated disclosure, leaving no official patch available at time of analysis. No public exploit identified at time of analysis as KEV, but POC lowers the practical exploitation barrier significantly.
Stack-based buffer overflow in UTT HiPER 1200GW firmware up to v2.5.3-170306 enables network-reachable authenticated attackers to corrupt stack memory and achieve arbitrary code execution on the device. The vulnerable C runtime function strcpy in the web management endpoint /goform/ConfigAdvideo performs no bounds validation on the timestart HTTP parameter, allowing oversized input to overwrite return addresses and redirect execution flow. A public proof-of-concept exploit is available on GitHub; no vendor patch exists as UTT did not respond to the coordinated disclosure.
Stack-based buffer overflow in the UTT HiPER 1250GW firmware (all versions up to v3.2.7-210907-180535) allows authenticated remote attackers to corrupt stack memory via the tempName argument of the /goform/getOneApConfTempEntry endpoint, with potential for arbitrary code execution on the device. A public proof-of-concept exploit is available on GitHub, and the vendor did not respond to coordinated disclosure, leaving no patch path available. No CISA KEV listing exists, but the PoC availability combined with an unpatched network device significantly elevates practical risk for any exposed management interface.
Stack-based buffer overflow in UTT HiPER 1250GW firmware (all versions through 3.2.7-210907-180535) enables low-privileged remote attackers to corrupt stack memory and achieve arbitrary code execution by submitting an oversized value to the cipher parameter of the /goform/APSecurity_5g endpoint. A public proof-of-concept exploit is available on GitHub, materially increasing opportunistic abuse risk. No vendor patch exists - the vendor failed to respond to responsible disclosure - leaving no fix-based remediation path at time of analysis.
Stack-based buffer overflow in the UTT HiPER 1250GW SOHO router (firmware through 3.2.7-210907-180535) lets a network-adjacent attacker corrupt memory by supplying an oversized 'ssid' argument to the /goform/ConfigWirelessBase_5g web handler, potentially achieving code execution or a device crash. The flaw is remotely reachable via the device's web management interface and carries a CVSS 4.0 base score of 7.4 (PR:L, indicating some authentication to the web UI is expected). Publicly available exploit code exists (disclosed via VulDB and a GitHub PoC), though there is no public exploit identified as being actively used in the wild.
Stack buffer overflow in UTT HiPER 2610G routers (firmware through 3.0.0-171107) allows authenticated remote attackers to corrupt memory by submitting an oversized GroupName parameter to the /goform/formConfigDnsFilterGlobal endpoint, which passes the input to an unsafe strcpy call. Publicly available exploit code exists (disclosed via VulDB and a GitHub PoC), and successful exploitation can compromise confidentiality, integrity, and availability of the device - typically meaning router takeover or denial of service. The issue is not listed in CISA KEV, so it is not confirmed actively exploited at this time.
Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows authenticated remote attackers to corrupt memory via the Profile parameter in the /goform/formFireWall endpoint, where unsafe strcpy usage processes the input. Publicly available exploit code exists, increasing the realistic risk of attempted compromise against exposed management interfaces. No CISA KEV listing has been published, so exploitation is not yet confirmed active in the wild.
Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware versions up to 2.5.3-170306) allows remote authenticated attackers to corrupt memory via the strcpy function in the /goform/formTaskEdit endpoint. Publicly available exploit code exists, raising the practical risk despite the requirement for low-level privileges. No KEV listing or EPSS data is provided in the input, so widespread automated exploitation has not been confirmed.
Remote code execution risk in the UTT HiPER 1250GW router (firmware up to 3.2.7-210907-180535) stems from an unbounded strcpy in the ConfigAdvideo web handler, where an oversized 'Profile' parameter overflows a stack buffer. Authenticated remote attackers (CVSS 4.0 PR:L) can crash the device or potentially hijack execution flow, achieving total impact on confidentiality, integrity, and availability. Publicly available exploit code exists per VulDB, though EPSS remains very low (0.04%) and there is no public exploit identified as actively used in the wild.
Stack buffer overflow in the UTT HiPER 1250GW gateway/router (firmware up to 3.2.7-210907-180535) lets a low-privileged authenticated attacker corrupt memory by supplying an oversized 'Profile' parameter to the formTaskEdit_ap web handler, which copies it via an unbounded strcpy(). The flaw is remotely reachable over the device's management interface and publicly available exploit code exists, though it is not listed in CISA KEV and carries a very low EPSS score (0.04%). Successful exploitation can crash the device or potentially execute attacker-controlled code with the privileges of the web server process.
Stack buffer overflow in the UTT HiPER 1250GW enterprise router (firmware up to 3.2.7-210907-180535) allows an authenticated attacker to corrupt memory by supplying an oversized Profile parameter to the route/goform/NTP web handler, which passes it to an unbounded strcpy(). The flaw is remotely reachable over the management interface and publicly available exploit code exists, though it is not listed in CISA KEV and carries a very low EPSS score (0.04%). Successful exploitation yields total compromise of confidentiality, integrity, and availability on the device.
Buffer overflow in UTT HiPER 1200GW router versions up to 2.5.3-170306 enables remote authenticated attackers to execute arbitrary code with high privileges via malformed NatBind parameters to the /goform/formNatStaticMap endpoint. Publicly available exploit code exists (GitHub POC published), significantly lowering exploitation barrier. EPSS data not available, but combination of network attack vector, low complexity (CVSS AC:L), and public POC indicates elevated real-world exploitation risk for internet-facing devices with weak credential protection.
Remote command execution in UTT Aggressive HiPER 520W router firmware v1.7.7-180627 allows unauthenticated attackers to execute arbitrary system commands via crafted input to the /goform/formDia component. CVSS 9.8 severity indicates network-accessible, low-complexity exploitation requiring no authentication or user interaction. EPSS score of 0.04% (12th percentile) suggests currently low exploitation probability despite publicly available exploit code exists (GitHub POC). No vendor-released patch identified at time of analysis, presenting significant risk for exposed devices.
Buffer overflow in UTT HiPER 1250GW router firmware (versions ≤3.2.7-210907-180535) allows authenticated remote attackers to achieve arbitrary code execution with high confidentiality, integrity, and availability impact. The vulnerability resides in the strcpy function within /goform/formNatStaticMap endpoint, where manipulation of the NatBind parameter triggers memory corruption. Publicly available exploit code exists (GitHub POC published), significantly lowering exploitation barriers for threat actors with valid credentials. CVSS 8.8 severity reflects network-based attack vector with low complexity, though low-privilege authentication is required, reducing immediate internet-scale exploitation risk.
Stack-based buffer overflow in UTT HiPER 1250GW router (versions up to 3.2.7-210907-180535) allows authenticated remote attackers to achieve arbitrary code execution with high integrity and availability impact via malformed Profile parameter in /goform/formRemoteControl endpoint. Publicly available exploit code exists. CVSS 8.8 reflects network accessibility with low attack complexity, though authentication requirement (PR:L) moderately reduces immediate exploit surface. No CISA KEV listing indicates exploitation remains proof-of-concept stage rather than widespread campaign activity.
Buffer overflow in UTT HiPER 1250GW firmware versions up to 3.2.7-210907-180535 allows authenticated remote attackers to achieve code execution through a malformed GroupName parameter in the DNS filter configuration handler. Public exploit code exists for this vulnerability and no patch is currently available. Affected organizations should restrict network access to administrative interfaces until remediation is possible.
Remote code execution in UTT HiPER 1250GW firmware versions up to 3.2.7 allows authenticated attackers to overflow a buffer in the /goform/setSysAdm function via a malicious GroupName parameter. Public exploit code exists for this vulnerability, and no patch is currently available. An attacker with valid credentials can achieve complete system compromise including code execution, data theft, and denial of service.
Unauthenticated attackers can trigger a buffer overflow in UTT HiPER 1200GW firmware versions up to 2.5.3-170306 via the /goform/websHostFilter endpoint, enabling remote code execution with full system compromise. Public exploit code is available and there is currently no patch, leaving affected devices at immediate risk. The vulnerability requires only network access and valid credentials to exploit, making it readily actionable for threat actors.
Remote code execution in UTT HiPER 810G up to version 1.7.7-171114 through a buffer overflow in the /goform/formApLbConfig endpoint allows authenticated attackers to achieve complete system compromise. The vulnerability stems from unsafe use of strcpy() on the loadBalanceNameOld parameter, and public exploit code is currently available. No patch has been released for affected devices.
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-1711 via a buffer overflow in the /goform/formApMail handler allows authenticated attackers to achieve complete system compromise. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected devices at elevated risk. The attack requires network access but no user interaction, making it a significant threat to organizations using this device.
Unauthenticated remote attackers can achieve complete system compromise (code execution, data theft, and denial of service) against UTT HiPER 810G firmware versions up to 1.7.7-1711 through a buffer overflow in the /goform/getOneApConfTempEntry endpoint. Public exploit code is available and actively being leveraged in attacks. No patch is currently available for affected devices.
Remote code execution in UTT HiPER 810G firmware up to version 1.7.7-171114 through a stack buffer overflow in the DNS filter configuration function allows authenticated attackers to execute arbitrary commands with full system privileges. Public exploit code is available for this vulnerability, increasing the risk of active exploitation. No patch is currently available, requiring organizations to implement network-level mitigations or device replacement until a fix is released.
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 stems from an unsafe strcpy operation in the /goform/formRemoteControl function that enables unauthenticated attackers to trigger a buffer overflow. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected devices at immediate risk.
A buffer overflow in the NTP configuration handler of UTT HiPER 810G firmware versions up to 1.7.7-171114 enables authenticated remote attackers to achieve complete system compromise through memory corruption. Public exploit code exists for this vulnerability, and no patch is currently available. Affected devices face immediate risk of remote code execution with high privileges from any authenticated user.
Remote code execution in UTT HiPER 810G firmware versions up to 1.7.7-171114 allows authenticated attackers to achieve full system compromise through a buffer overflow in the P2P limit configuration function. The vulnerability exists due to unsafe use of strcpy() in the /goform/formP2PLimitConfig endpoint and is exploitable over the network with public exploit code currently available. No patch has been released, making this a critical risk for deployed devices.
Buffer overflow in UTT HiPER 810G firmware versions up to 1.7.7-171114 allows authenticated remote attackers to achieve code execution by supplying an oversized GroupName parameter to the /goform/formPolicyRouteConf endpoint. Public exploit code exists for this vulnerability and no patch is currently available.
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-1711 allows authenticated remote attackers to execute arbitrary code by exploiting a buffer overflow in the /goform/formTaskEdit_ap endpoint. An attacker can trigger the vulnerability by crafting a malicious txtMin2 parameter that overflows the strcpy function, and public exploit code exists for this flaw. No patch is currently available for affected devices.
Buffer overflow in UTT HiPER 810G firmware versions up to 1.7.7-1711 allows remote attackers with high privileges to execute arbitrary code through the passwd1 parameter in the /goform/setSysAdm function. Public exploit code exists for this vulnerability and no patch is currently available. An authenticated attacker can leverage this flaw to achieve complete system compromise with high impact on confidentiality, integrity, and availability.
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 allows unauthenticated attackers to overflow a buffer via the remark parameter in the /goform/ConfigExceptMSN endpoint. Public exploit code is available and no patch has been released, creating immediate risk for exposed devices.
Unauthenticated remote attackers can achieve complete system compromise through a buffer overflow in the UTT HiPER 810G firmware's /goform/ConfigExceptAli endpoint via unsafe string handling. Public exploit code is available for this vulnerability, increasing exploitation risk for unpatched devices. The flaw requires only network access and affects firmware version 1.7.7-171114 with no patch currently available.
Remote code execution in UTT HiPER 520 Firmware 1.7.7-160105 allows unauthenticated attackers to inject arbitrary OS commands through the Isp_Name parameter in the web management interface. Public exploit code exists for this vulnerability, and no patch is currently available. An attacker can achieve full system compromise by sending a specially crafted request to the /goform/formReleaseConnect endpoint.
Remote command injection in UTT HiPer 520 Firmware 1.7.7-160105 web management interface allows unauthenticated attackers to execute arbitrary OS commands through the policyNames parameter. Public exploit code exists for this vulnerability, increasing risk of active exploitation. No patch is currently available.
Remote code execution in UTT 521G firmware 3.1.1-190816 allows unauthenticated attackers to inject arbitrary OS commands through the policyNames parameter in the /goform/formPdbUpConfig endpoint. Public exploit code exists for this vulnerability, and no patch is currently available. Affected organizations using this device should immediately implement network segmentation or disable remote access until a fix is released.
521G Firmware versions up to 3.1.1-190816 contains a vulnerability that allows attackers to command injection (CVSS 7.2).
810 Firmware versions up to 1.7.4-141218 contains a vulnerability that allows attackers to command injection (CVSS 7.2).
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 allows authenticated attackers to achieve full system compromise via a buffer overflow in the Management Interface firewall configuration function. Public exploit code exists for this vulnerability, and no patch is available from the vendor despite early disclosure notification. The attack requires valid credentials but can be executed over the network without user interaction.
Remote code execution in UTT HiPER 810 Firmware 1.7.4-141218 via command injection in the user administration function allows unauthenticated attackers to execute arbitrary commands over the network. The vulnerability exists in the passwd1 parameter of the /goform/formUser endpoint and has public exploit code available. No patch is currently available from the vendor, who has been unresponsive to disclosure attempts.
Unauthenticated attackers can exploit a buffer overflow in the UTT 520W Firmware's P2P configuration function via a crafted request to achieve remote code execution with high privileges. The vulnerability requires only network access and low complexity to exploit, with public exploit code already available. No patch has been released by the vendor despite early notification.
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 through a buffer overflow in the /goform/formPolicyRouteConf endpoint allows authenticated attackers to execute arbitrary commands on affected devices. Public exploit code is available for this vulnerability, and no patch has been released despite vendor notification. The flaw stems from improper bounds checking in the GroupName parameter handling.
Remote code execution in UTT 520W firmware 1.7.7-180627 allows authenticated attackers to execute arbitrary code via a buffer overflow in the ServerIp parameter of the /goform/formSyslogConf endpoint. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early disclosure attempts. The attack requires network access and valid credentials but executes with full system privileges.
Remote code execution in UTT 520W firmware through a buffer overflow in the /goform/formTimeGroupConfig endpoint allows authenticated attackers to achieve complete system compromise via manipulation of the year1 parameter. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early disclosure notification. The high CVSS score of 8.8 reflects the combination of network accessibility, low attack complexity, and full impact on confidentiality, integrity, and availability.
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 via stack buffer overflow in the /goform/formIpGroupConfig endpoint allows authenticated attackers to achieve complete system compromise. Public exploit code exists for this vulnerability, and the vendor has not provided a patch despite early disclosure notification. Affected devices are remotely exploitable with no user interaction required.
UTT HiPER 810 router firmware 1.7.4 has a stack buffer overflow in the /goform/setNat endpoint's strcpy function, enabling remote attackers to execute arbitrary code.
Remote code execution in UTT 520W firmware 1.7.7-180627 via a buffer overflow in the /goform/ConfigExceptAli endpoint allows authenticated attackers to execute arbitrary code with high privileges. Public exploit code exists for this vulnerability, and no patch is available from the vendor despite early disclosure notification. Affected organizations running vulnerable 520W devices should immediately isolate or replace equipment until a security update becomes available.
Remote code execution in UTT 520W firmware 1.7.7-180627 stems from a buffer overflow in the /goform/ConfigExceptMSN endpoint accessible to authenticated users. Public exploit code exists for this vulnerability, and the vendor has not released a patch despite early notification. An attacker with valid credentials can achieve complete system compromise including data theft, modification, and service disruption.
Buffer overflow in UTT 520W firmware version 1.7.7-180627 allows authenticated remote attackers to execute arbitrary code through the /goform/ConfigExceptQQ endpoint via unsafe string operations. Public exploit code is available and the vendor has not provided a patch despite early notification. This vulnerability affects confidentiality, integrity, and availability with CVSS 8.8 severity.
Remote code execution in UTT 520W firmware versions through 1.7.7-180627 stems from a buffer overflow in the /goform/formWebAuthGlobalConfig endpoint, allowing authenticated attackers to execute arbitrary code with network access. Public exploit code is available for this vulnerability, and no patches have been released despite vendor notification. The high CVSS score of 8.8 reflects full compromise of confidentiality, integrity, and availability on affected devices.
Remote code execution in UTT 520W firmware via stack-based buffer overflow in the /goform/formPictureUrl endpoint allows authenticated attackers to achieve complete system compromise. The vulnerability stems from unsafe use of strcpy() when processing the importpictureurl parameter and lacks an available patch. Public exploit code exists for this high-severity issue affecting firmware version 1.7.7-180627.
Remote code execution in UTT 520W firmware (version 1.7.7-180627) via a stack buffer overflow in the /goform/formConfigNoticeConfig endpoint allows unauthenticated attackers to execute arbitrary code with full system privileges. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. An attacker can trigger the overflow by manipulating the timestart parameter through a network request.
Remote code execution in UTT 520W Firmware 1.7.7-180627 via buffer overflow in the /goform/APSecurity endpoint allows authenticated attackers to achieve full system compromise through manipulation of the wepkey1 parameter. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. The high CVSS score of 8.8 reflects the critical nature of this remotely exploitable flaw affecting confidentiality, integrity, and availability.
Remote code execution in UTT 520W firmware 1.7.7-180627 via buffer overflow in the wireless configuration endpoint allows authenticated attackers to achieve complete system compromise with high integrity and availability impact. Public exploit code exists for this vulnerability, and the vendor has not provided a patch despite early disclosure notification. The flaw requires network access but no user interaction, making it readily exploitable in environments where administrative credentials are available or compromised.
Remote code execution in UTT 520W Firmware 1.7.7-180627 via buffer overflow in the /goform/formFireWall endpoint allows authenticated attackers to achieve full system compromise through a malicious GroupName parameter. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. The attack requires only network access and valid credentials, presenting significant risk to affected deployments.
Remote code execution in UTT 520W firmware versions up to 1.7.7-180627 allows authenticated attackers to execute arbitrary code through a buffer overflow in the /goform/formConfigFastDirectionW endpoint via the ssid parameter. Public exploit code exists for this vulnerability and the vendor has not released a patch despite early notification. Attackers with valid credentials can achieve complete system compromise with high impact on confidentiality, integrity, and availability.
Buffer overflow in UTT HiPER 2610G firmware (up to 3.0.0-171107) enables an authenticated, adjacent-network attacker to corrupt memory via an unsafe strcpy call in the web management NAT static mapping form handler. By supplying an oversized NatBinds argument to /goform/formNatStaticMap, an attacker can achieve low-level impacts across confidentiality, integrity, and availability on the targeted device. No KEV listing is present, but a public proof-of-concept is confirmed on GitHub, materially lowering the exploitation barrier for any attacker already on the local network.
Remote command execution in UTT Aggressive 520W v3v1.7.7-180627 via the /goform/formReleaseConnect component allows authenticated attackers with high privileges to execute arbitrary system commands through a crafted string parameter, resulting in complete system compromise (confidentiality, integrity, and availability impact). No public exploit code or active exploitation has been confirmed at the time of analysis.
Buffer overflow in UTT Aggressive HiPER 810G v3 v1.7.7-171114 formTaskEdit function allows authenticated administrators to cause denial of service through a malformed selDateType parameter. The vulnerability is a classic stack-based buffer overflow (CWE-120) requiring high-privilege local network access; no public exploitation framework has been identified, and CVSS 4.5 reflects the limited scope (DoS only, no code execution or information disclosure).
Buffer overflow in UTT Aggressive 520W v3 firmware version 1.7.7-180627 allows authenticated high-privilege attackers to cause denial of service by supplying crafted input to the addCommand parameter of the formConfigCliForEngineerOnly function. The vulnerability requires administrative-level access and local network connectivity, limiting real-world attack surface despite the buffer overflow class of vulnerability.
Buffer overflow in UTT Aggressive HiPER 1200GW v2.5.3-170306 formArpBindConfig function allows authenticated attackers with high privileges to cause denial of service by supplying a crafted input to the pools parameter. CVSS score of 4.5 reflects limited attack surface (local network access required) and high privilege requirement, though impact is complete availability loss. No public exploit code or active exploitation confirmed at time of analysis.
Buffer overflow in UTT Aggressive 520W v3 v1.7.7-180627 filename parameter of formFtpServerDirConfig function allows authenticated attackers with high privileges to cause denial of service. The vulnerability requires local network access and high-level administrative credentials; no public exploit code or active exploitation has been confirmed at time of analysis.
Buffer overflow in UTT Aggressive HiPER 810G v3 v1.7.7-171114 ConfigAdvideo function allows authenticated local attackers with high privileges to cause denial of service by crafting malicious input to the timestart parameter. The vulnerability scores low-to-moderate risk (CVSS 4.5) due to strict prerequisites: network access limited to adjacent network only, high privilege requirement, and impact restricted to availability.
Buffer overflow in UTT Aggressive HiPER 810G v3 version 1.7.7-171114 within the notes parameter of the formGroupConfig function enables authenticated administrators to trigger a denial of service condition through a crafted input. The vulnerability requires high-privilege access and cannot result in code execution, but represents a threat to device availability. No public exploit code has been independently confirmed, and this CVE does not appear on the CISA KEV catalog at time of analysis.
Buffer overflow in UTT Aggressive HiPER 1200GW v2.5.3-170306 timeRangeName parameter allows authenticated attackers with high privileges to cause denial of service through crafted input to the formConfigDnsFilterGlobal function. CVSS score of 4.5 reflects local/adjacent network attack vector and high-privilege requirement, with no confidentiality or integrity impact. No public exploit code or active exploitation confirmed at time of analysis.
Insecure default telnet credentials in UTT HiPER 810 router firmware v1.5.0. Default credentials are publicly known, enabling unauthenticated access to the router management. PoC available.
Command injection in UTT HiPER 810 Firmware version 1.7.4-141218 allows authenticated remote attackers to execute arbitrary commands through manipulation of the policyNames parameter in the /goform/formPdbUpConfig endpoint. Public exploit code exists for this vulnerability, and no patch is currently available. Attackers with login credentials can achieve code execution with minimal complexity.
Authenticated buffer overflow in the UTT 进取 520W router running firmware 1.7.7-180627 allows remote attackers holding low-privilege credentials to corrupt memory by sending an oversized 'timestart' parameter to the /goform/ConfigAdvideo handler, which can crash the device or potentially lead to code execution. The issue is an unbounded strcpy into a fixed buffer (CWE-119) and is rated CVSS 4.0 7.4 with high confidentiality, integrity and availability impact confined to the device (no scope change). Publicly available exploit code exists on GitHub, but there is no CISA KEV confirmation of active exploitation, EPSS is low at 0.03% (9th percentile), and the vendor did not respond to disclosure, so no vendor patch has been identified at time of analysis.
Buffer overflow in the UTT 进取 520W router running firmware 1.7.7-180627 lets a remote attacker reach the device's web management interface, and with at least low-level authenticated access to that interface, send a crafted selDateType parameter to /goform/formTaskEdit to overwrite stack memory, causing memory corruption that can lead to code execution or a device crash/denial of service. Publicly available exploit code exists (published GitHub PoC referenced by VulDB) and the vendor was contacted but never responded, so no official fix is available; EPSS is only 0.03% (9th percentile) and there is no evidence of confirmed active exploitation in CISA KEV.
Stack buffer overflow in the UTT 进取 520W router (firmware 1.7.7-180627) lets an attacker with valid web-admin credentials crash or potentially execute code on the device by sending an oversized EncryptionMode parameter to the /goform/formPptpClientConfig endpoint. Publicly available exploit code exists (a GitHub PoC walkthrough of the strcpy overflow), though EPSS is only 0.03% (7th percentile) and there is no CISA KEV listing, so real-world targeting appears minimal. The vendor was contacted about the flaw but never responded, so no official firmware fix has been identified and the model must be defended through network exposure controls and credential hygiene. This is a classic high-CVSS-but-low-real-risk profile: the assessed vector requires authenticated access (CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), which sharply limits opportunistic exploitation.
Memory corruption in the UTT 520W router firmware (version 1.7.7-180627) allows an authenticated remote attacker to overflow a stack buffer through the 'passwd1' parameter handled by /goform/formUser, which can crash the device or lead to code execution under the web server's privileges. Publicly available exploit code exists (a GitHub proof-of-concept linked from NVD), but there is no CISA KEV entry and EPSS is only 0.03% (9th percentile), indicating limited observed exploitation. The vendor was notified early and did not respond, so no vendor-released patch has been identified at time of analysis.
Stack-based buffer overflow in the UTT 512W router (firmware 1.7.7-171114) allows an authenticated, network-positioned attacker to corrupt memory by sending an overlong filename value to the FTP-server directory configuration handler at /goform/formFtpServerDirConfig, with high confidentiality, integrity and availability impact on the device itself. Exploitation requires valid credentials (CVSS vector PR:L) and network reachability of the web management interface, so devices with management restricted to a trusted LAN and non-default credentials are substantially harder to reach. Publicly available exploit code exists, but there is no CISA KEV listing and EPSS is low (0.11%, 29th percentile), and no vendor patch has been released because the vendor did not respond to disclosure.
Stack-based buffer overflow in the UTT 进取 512W router (firmware 1.7.7-171114) lets an authenticated attacker who can reach the device web management interface crash or potentially execute code on the device by submitting an oversized 'oldfilename' parameter to /goform/formFtpServerShareDirSelcet. According to the CVSS 4.0 vector the attacker must already hold valid credentials (PR:L), so the flaw is a post-authentication escalation/denial-of-service vector rather than an unauthenticated remote compromise. Publicly available exploit code exists (a GitHub PoC was published alongside the disclosure) and the report indicates the vendor was contacted but never responded, so no fixed firmware has been released; EPSS is only 0.11% (29th percentile), and the overall risk is low because exploitation requires an authenticated session and the affected device/firmware combination has a very small deployment base.
An authenticated buffer overflow in the UTT 进取 512W router firmware 1.7.7-171114 allows a user who is already logged into the web management interface to crash or potentially execute code on the device by sending a single crafted request containing an overlong addCommand parameter to /goform/formConfigCliForEngineerOnly. The flaw is a classic unchecked strcpy into a fixed-size buffer, rated 7.4 (CVSS 4.0 and our independent CVSS 3.1 assessment both agree), and it requires valid credentials (PR:L) plus network reachability to the management interface, which is normally LAN-side unless remote administration has been enabled. Publicly available exploit code exists and the vendor did not respond to the disclosure, but there is no evidence of active exploitation (not in CISA KEV) and EPSS is only 0.04% (11th percentile), so this points to a low real-world priority despite the moderate score.
Stack-based buffer overflow in the web management interface of the UTT 进取 512W router (firmware 1.7.7-171114) allows authenticated remote attackers to crash or potentially execute code on the device by sending an oversized 'Profile' argument to /goform/formRemoteControl. Exploitation requires network reachability to the router's admin web UI plus valid low-privileged credentials (the CVSS vectors for both the NVD 4.0 score and the independent 3.1 assessment specify PR:L), and publicly available exploit code exists, though there is no evidence of active exploitation (CISA KEV does not list this CVE) and EPSS is only 0.04% (11th percentile). The vendor was contacted early but never responded, so no patch has been released, and real-world risk is low despite the 7.4 CVSS 4.0 score because the product is obscure, low-deployment, and the attack is gated behind authentication.
An unsafe strcpy() in the /goform/ConfigExceptMSN handler of UTT 进取 (JinQu) 512W router firmware up to and including 1.7.7-171114 lets an authenticated remote attacker overflow a stack buffer by supplying an overlong 'remark' parameter, corrupting adjacent memory and potentially leading to code execution in the context of the device's web server. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms network reachability, low attack complexity and high confidentiality, integrity and availability impact, but also makes clear that a low-privileged authenticated session on the web UI is required - the principal limiting factor. Publicly available exploit code exists (a GitHub write-up with a PoC under the cymiao1978/cve repository), so the barrier to reproduction is low, although no CISA KEV entry indicates confirmed active exploitation in the wild; real-world risk is dominated by whether the router's management interface is exposed beyond the trusted LAN.
A stack-based buffer overflow in the web management component of UTT 进取 512W router firmware (versions up to and including 1.7.7-171114) lets an attacker who holds a valid low-privilege management session crash or potentially execute code on the device by submitting an oversized 'timestart' value to /goform/formConfigNoticeConfig, which is copied with the unbounded strcpy function. The input's CVSS vector (PR:L, UI:N) confirms authentication is required but that no user interaction is needed once a session exists, and publicly available exploit code exists - no CISA KEV entry indicates confirmed active exploitation at the time of analysis. With a CVSS 4.0 base score of 7.4 and high confidentiality, integrity, and availability impact on the device, this is a genuine but moderate-priority issue rather than a top-tier emergency, primarily limited by the authentication prerequisite, the requirement that the admin interface be reachable, and the narrow deployment base of this specific router model.
Authenticated attackers who can reach the UTT 512W router's web management interface can trigger a strcpy-based buffer overflow in the /goform/APSecurity handler by submitting an overlong value in the 'wepkey1' wireless-security parameter, corrupting memory and potentially achieving code execution with the privileges of the device's HTTP process. The flaw affects UTT 512W firmware up to and including 1.7.7-171114; the CVSS 4.0 vector (AV:N/AC:L/PR:L/UI:N, VC:H/VI:H/VA:H) confirms the attack is network-reachable but requires at least low-privilege authentication, so it is not exploitable by unauthenticated outsiders unless the admin interface is exposed with weak, default, or reused credentials. Publicly available exploit code exists (a GitHub PoC accompanies the VulDB disclosure), but there is no evidence of confirmed active exploitation (no CISA KEV listing), placing this at moderate rather than emergency priority.
A stack-based buffer overflow in the UTT 512W router firmware (versions up to and including 3.1.7.7-171114) lets an attacker who can reach the device's web management interface overwrite memory in the HTTP/form handler by sending an oversized 'ssid' parameter to /goform/formConfigFastDirectionW, potentially achieving arbitrary code execution with the privileges of the web service or crashing the device. Publicly available exploit code exists, and EPSS places the flaw at roughly 5.63% (93rd percentile) of exploitation likelihood in the next 30 days, although it is not listed in CISA KEV and no confirmed active exploitation has been reported. The vendor was contacted but did not respond, so no fixed firmware has been released; notably, the supplier's CVSS 4.0 vector claims an unauthenticated attack (PR:N), while our assessment rates it as requiring an authenticated administrative session (PR:L) and access to the management service, which is normally LAN-only unless remote administration is enabled.
Remote buffer overflow in UTT 512W firmware (through 3.1.7.7-171114) allows an unauthenticated network attacker to corrupt memory and potentially achieve code execution by sending a crafted request to the /goform/formNatStaticMap endpoint with an overlong NatBind parameter. Per the CVSS vectors (PR:N/UI:N), no credentials or user interaction are required, so the practical limiting factor is exposure of the device's web management interface - a LAN-only default blocks internet exploitation, while WAN-exposed or LAN-adjacent attackers can trigger it directly. Publicly available exploit code exists and EPSS places the flaw at roughly the 93rd percentile (5.72%), indicating elevated relative interest, though there is no CISA KEV entry confirming active exploitation; the vendor did not respond to the disclosure, so no vendor-released patch has been identified.
Buffer overflow in UTT 520W firmware version 1.7.7-180627 allows remote authenticated attackers to cause a denial of service via crafted input to the addHostFilter parameter in the websHostFilter endpoint. Exploit code is publicly available, but no active exploitation in the wild has been confirmed.
Buffer overflow in the DNS filter configuration interface of UTT 520W firmware 1.7.7-180627 allows adjacent network attackers with low privileges to cause denial of service by submitting an overly long timeRangeName parameter. Public proof-of-concept code is available, but exploitation requires authenticated access from the local network. The vendor did not respond to disclosure and no patch is available.
A security vulnerability has been detected in UTT 进取 750W up to 3.2.2-191225. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Remote buffer overflow in UTT HiPER 2620G firmware up to 3.1.4 enables an attacker with a low-privilege authenticated session on the web management interface to corrupt memory via the /goform/fNTP NTPServerIP parameter, potentially achieving high confidentiality, integrity, and availability impact. Publicly available exploit code exists, but there is no confirmed active exploitation (CISA KEV) and the EPSS score is low at 0.75% (54th percentile). The vendor did not respond to the disclosure, and no vendor-released patch is identified in the provided data.
A buffer overflow in the UTT 518G router firmware (up to V3v3.2.7-210919-161313) is reachable through the authenticated web management endpoint /goform/formTaskEdit_ap, where an oversized txtMin2 argument overwrites memory and can lead to high-integrity/high-availability impact on the device, with the assessed CVSS 3.1 base score of 8.8 and the vendor-published CVSS 4.0 score of 7.4. The CVSS 4.0/3.1 vectors both carry PR:L, meaning the attacker must already hold at least low-level credentials on the router, so the practical exposure is limited to users who can log in to the web console rather than any remote unauthenticated party on the internet. Publicly available exploit code exists (linked from a GitHub PoC write-up), but there is no CISA KEV listing and EPSS is only 0.84% (56th percentile), so signals are mixed and this is a real but limited-priority issue.
An authenticated buffer overflow in the UTT 1250GW gateway firmware (all builds through v2v3.2.2-200710) lets an attacker with a low-privilege session on the device's web management interface send an oversized pvid parameter to /goform/aspChangeChannel, corrupting memory on the stack via an unchecked strcpy and potentially achieving full code execution on the gateway. Exploitation is remote and low-complexity with no user interaction, but is gated by the need for prior authentication (CVSS PR:L), which is the main limiting factor. Publicly available exploit code exists on GitHub, and although the vendor was contacted early, no response or fixed firmware version has been published.
A buffer overflow in the UTT 1250GW router firmware (up to v2v3.2.2-200710) lets attackers who already hold valid low-privilege credentials crash or potentially execute code on the device by sending an oversized Username parameter to the /goform/formUserStatusRemark web endpoint over the network - no user interaction is required. Publicly available exploit code exists (a proof-of-concept was disclosed via a GitHub issue referenced by NVD), which raises the practical likelihood of exploitation, though the EPSS score of 0.75% (54th percentile) and the requirement for prior authentication indicate limited mass-exploitation urgency rather than an imminent, unauthenticated internet-wide threat. The vendor was contacted early about the disclosure but did not respond, so no vendor-released patch is identified and the exposure window remains open for anyone running the affected firmware with a reachable management interface.
Buffer overflow in UTT HiPER 840G firmware through 3.1.1-190328 allows an authenticated remote attacker to corrupt memory and potentially execute code on the device by sending an overlong txtMin2 argument to the /goform/formTaskEdit web endpoint. Exploitation requires reachability of the HiPER 840G web management interface plus a valid session with at least low privileges (CVSS PR:L), and publicly available exploit code exists, though there is no confirmed active exploitation (CISA KEV). EPSS is modest at 0.97% (61st percentile), and because the vendor was contacted early but never responded, no vendor-released patch has been identified at time of analysis.
A security vulnerability has been detected in UTT 1200GW and 1250GW up to 3.0.0-170831/3.2.2-200710. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.