CVE-2025-15431

🗓️ 02 Jan 2026 06:02:05Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 24 Views🌐 WEB

CVE-2025-15431: Buffer overflow in strcpy for formFtpServerDirConfig on UTT进取 512W 1.7.7-171114 allows remote attack.

Reporter	Title	Published	Views	Family All 11
attackerkb	CVE-2025-15431	2 Jan 202606:02	–	attackerkb
bdu_fstec	The vulnerability of the strcpy() function in the /goform/formFtpServerDirConfig file of the UTT 512W router software, which allows a attacker to execute arbitrary code.	14 Jan 202600:00	–	bdu_fstec
circl	CVE-2025-15431	1 Jan 202612:57	–	circl
cnnvd	UTT 512W 安全漏洞	2 Jan 202600:00	–	cnnvd
cvelist	CVE-2025-15431 UTT 进取 512W formFtpServerDirConfig strcpy buffer overflow	2 Jan 202606:02	–	cvelist
euvd	EUVD-2026-0709	2 Jan 202606:02	–	euvd
nvd	CVE-2025-15431	2 Jan 202606:15	–	nvd
osv	CVE-2025-15431	2 Jan 202606:15	–	osv
ptsecurity	PT-2026-1027	1 Jan 202600:00	–	ptsecurity
redhatcve	CVE-2025-15431	3 Jan 202607:07	–	redhatcve

NVD

Vulners

Node

AND

utt 512w_firmwareRange≤1.7.7-171114

utt 512wMatch3.0

[
  {
    "vendor": "UTT",
    "product": "进取 512W",
    "versions": [
      {
        "version": "1.7.7-171114",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/GUOTINGTING2297/cve/blob/main/1234/21.md
github	www.github.com/GUOTINGTING2297/cve/blob/main/1234/21.md

Parameter	Position	Path	Description	CWE
filename	request body	/goform/formFtpServerDirConfig	Buffer overflow via filename argument in formFtpServerDirConfig	CWE-119, CWE-120

17 Jun 2026 08:37Current

8.7High risk

Vulners AI Score8.7

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00687

SSVC