CVE-2025-11652

HIGH

UTT 518g Firmware < 3.2.7-210919-161313 - Memory Corruption

Title source: rule
STIX 2.1

Description

A vulnerability was found in UTT 进取 518G up to V3v3.2.7-210919-161313. This issue affects some unknown processing of the file /goform/formTaskEdit_ap. The manipulation of the argument txtMin2 results in buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.328069
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.328069
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.664926
Exploit, Third Party Advisory related
https://github.com/cymiao1978/cve/blob/main/14.md

Scores

CVSS v3 8.8
EPSS 0.0035
EPSS Percentile 57.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-119 CWE-120
Status published
Products (1)
utt/518g_firmware < 3.2.7-210919-161313
Published Oct 13, 2025
Tracked Since Feb 18, 2026