← voltar
CVE-2025-15089

UTT 进取 512W APSecurity strcpy buffer overflow

CVSS 8.7 HIGHEPSS 0.7%CWE-119CWE-120
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 8.7EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
25 dez 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. This affects the function strcpy of the file /goform/APSecurity. The manipulation of the argument wepkey1 leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
UTT · 进取 512W

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/cymiao1978/cve/blob/main/new/14.mdhttps://github.com/cymiao1978/cve/blob/main/new/14.md#pochttps://vuldb.com/?ctiid.338418https://vuldb.com/?id.338418https://vuldb.com/?submit.708348