CVE-2025-6734

🗓️ 26 Jun 2025 23:00:13Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 21 Views🌐 WEB

Critical buffer overflow in UTT HiPER 840G API allowing remote attacks, disclosed but unaddressed.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-6734	26 Jun 202523:53	–	circl
CNNVD	UTT HiPER 840G 安全漏洞	26 Jun 202500:00	–	cnnvd
CNVD	UTT HiPER 840G Buffer Overflow Vulnerability (CNVD-2026-00818)	1 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-6734 UTT HiPER 840G API formP2PLimitConfig sub_484E40 buffer overflow	26 Jun 202523:00	–	cvelist
EUVD	EUVD-2025-19243	3 Oct 202520:07	–	euvd
NVD	CVE-2025-6734	26 Jun 202523:15	–	nvd
OSV	CVE-2025-6734	26 Jun 202523:15	–	osv
Positive Technologies	PT-2025-27021	26 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-6734	28 Jun 202523:07	–	redhatcve
Vulnrichment	CVE-2025-6734 UTT HiPER 840G API formP2PLimitConfig sub_484E40 buffer overflow	26 Jun 202523:00	–	vulnrichment

NVD

Vulners

Node

utt 840g_firmwareRange≤3.1.1-190328

AND

utt 840gMatch3.0

[
  {
    "vendor": "UTT",
    "product": "HiPER 840G",
    "versions": [
      {
        "version": "3.1.1-190328",
        "status": "affected"
      }
    ],
    "modules": [
      "API"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/d2pq/cve/blob/main/616/3.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/d2pq/cve/blob/main/616/3.md

Parameter	Position	Path	Description	CWE
except	request body	goform/formP2PLimitConfig	Buffer overflow in parameter handling within API formP2PLimitConfig (sub_484E40) may allow remote attacker to exploit via manipulated input.	CWE-119, CWE-120

08 Jan 2026 19:44Current

8.8High risk

Vulners AI Score8.8

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.01491

SSVC