Логотип exploitDog
bind:CVE-2025-15431
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-15431

Количество 3

Количество 3

nvd логотип

CVE-2025-15431

около 1 месяца назад

A flaw has been found in UTT 进取 512W 1.7.7-171114. This affects the function strcpy of the file /goform/formFtpServerDirConfig. Executing manipulation of the argument filename can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-h4jj-hgv3-ppwg

около 1 месяца назад

A flaw has been found in UTT 进取 512W 1.7.7-171114. This affects the function strcpy of the file /goform/formFtpServerDirConfig. Executing manipulation of the argument filename can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 8.8
EPSS: Низкий
fstec логотип

BDU:2026-00366

около 2 месяцев назад

Уязвимость функции strcpy() файла /goform/formFtpServerDirConfig микропрограммного обеспечения маршрутизаторов UTT 512W, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-15431

A flaw has been found in UTT 进取 512W 1.7.7-171114. This affects the function strcpy of the file /goform/formFtpServerDirConfig. Executing manipulation of the argument filename can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 8.8
0%
Низкий
около 1 месяца назад
github логотип
GHSA-h4jj-hgv3-ppwg

A flaw has been found in UTT 进取 512W 1.7.7-171114. This affects the function strcpy of the file /goform/formFtpServerDirConfig. Executing manipulation of the argument filename can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 8.8
0%
Низкий
около 1 месяца назад
fstec логотип
BDU:2026-00366

Уязвимость функции strcpy() файла /goform/formFtpServerDirConfig микропрограммного обеспечения маршрутизаторов UTT 512W, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
0%
Низкий
около 2 месяцев назад

Уязвимостей на страницу