CVE-2025-15431

🗓️ 02 Jan 2026 06:02:05Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 9 Views🌐 WEB

CVE-2025-15431: Buffer overflow in strcpy for formFtpServerDirConfig on UTT进取 512W 1.7.7-171114 allows remote attack.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2025-15431	2 Jan 202606:02	–	attackerkb
Circl	CVE-2025-15431	1 Jan 202612:57	–	circl
CNNVD	UTT 512W 安全漏洞	2 Jan 202600:00	–	cnnvd
Cvelist	CVE-2025-15431 UTT 进取 512W formFtpServerDirConfig strcpy buffer overflow	2 Jan 202606:02	–	cvelist
EUVD	EUVD-2026-0709	2 Jan 202606:02	–	euvd
NVD	CVE-2025-15431	2 Jan 202606:15	–	nvd
OSV	CVE-2025-15431	2 Jan 202606:15	–	osv
Positive Technologies	PT-2026-1027	1 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-15431	3 Jan 202607:07	–	redhatcve
Vulnrichment	CVE-2025-15431 UTT 进取 512W formFtpServerDirConfig strcpy buffer overflow	2 Jan 202606:02	–	vulnrichment

NVD

Vulners

Node

utt 512w_firmwareRange≤1.7.7-171114

AND

utt 512wMatch3.0

[
  {
    "vendor": "UTT",
    "product": "进取 512W",
    "versions": [
      {
        "version": "1.7.7-171114",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/GUOTINGTING2297/cve/blob/main/1234/21.md
github	www.github.com/GUOTINGTING2297/cve/blob/main/1234/21.md

Parameter	Position	Path	Description	CWE
filename	request body	/goform/formFtpServerDirConfig	Buffer overflow due to uncontrolled filename input in formFtpServerDirConfig	CWE-119, CWE-120

23 Feb 2026 09:16Current

8.7High risk

Vulners AI Score8.7

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00154

SSVC