CVE-2025-15089

HIGH

UTT 512W < 1.7.7-171114 - Buffer Overflow via wepkey1 Argument in /goform/APSecurity

Title source: llm
STIX 2.1

Description

A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. This affects the function strcpy of the file /goform/APSecurity. The manipulation of the argument wepkey1 leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.338418
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.338418
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.708348

Scores

CVSS v3 8.8
EPSS 0.0066
EPSS Percentile 46.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-119 CWE-120
Status published
Products (1)
utt/512w_firmware < 1.7.7-171114
Published Dec 25, 2025
Tracked Since Feb 18, 2026