CVE-2025-15092

A vulnerability was identified in UTT  512W up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/ConfigExceptMSN. Such manipulation of the argument remark leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
VulDBCNA
8.8 HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://github.com/cymiao1978/cve/blob/main/new/17.md
https://github.com/cymiao1978/cve/blob/main/new/17.md#poc
https://vuldb.com/?ctiid.338421
https://vuldb.com/?id.338421
https://vuldb.com/?submit.708351
https://github.com/cymiao1978/cve/blob/main/new/17.md#poc