CVE-2025-25612

CVE-2025-25612: FS S3150-8T2F 交换机存储型跨站脚本（XSS）漏洞 CVE-2025-25612 FS Inc S3150-8T2F（版本低于 S3150-8T2F2.2.0D135103）在管理界面的时间范围配置功能中存在跨站脚本（XSS）漏洞。攻击者可以向“时间范围名称”字段注入恶意 JavaScript，该字段未得到正确清理。此输入被保存后，会在任何访问受影响页面的用户（包括管理员）的浏览器中执行，导致在用户浏览器中执行任意脚本。 发现于 2024 年 11 月 参考链接：...

UTT 1200GW 安全漏洞

UTT 1200GW is a wireless router produced by China's UT Technology Co., Ltd. The UTT 1200GW v2.5.3-170306 version contains a security vulnerability. This vulnerability stems from a buffer overflow in the timeRangeName parameter of the formConfigDnsFilterGlobal function, which could allow attackers...

UTT 520W 安全漏洞

The UTT Progress 520W is an enterprise-grade wireless router from Atech Technology UTT designed for office environments such as small businesses and remote branch offices. The UTT Progress 520W suffers from a buffer overflow vulnerability that originates from the parameter timeRangeName in the fi...

PT-2025-49364

Name of the Vulnerable Software and Affected Versions UTT 进取 520W version 1.7.7-180627 Description A security issue exists in UTT 进取 520W version 1.7.7-180627 related to a buffer overflow. The strcpy function within the file /goform/formConfigDnsFilterGlobal is affected. Manipulation of the...