Lucene search
K

93 matches found

CNNVD
CNNVD
added 2026/04/06 12:0 a.m.3 views

UTT 520W 安全漏洞

UTT 520W is a wireless router produced by China's UT Technology Co., Ltd. The UTT 520W v3v1.7.7-180627 version contains a security vulnerability. This vulnerability stems from a buffer overflow in the filename parameter of the formFtpServerDirConfig function, which could lead to a denial-of-servi...

4.5CVSS6.1AI score0.00229EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.3 views

UTT 520W 安全漏洞

UTT 520W is a wireless router produced by China's UTTE Corporation. The UTT 520W v3v1.7.7-180627 version contains a security vulnerability. This vulnerability stems from issues with the /goform/formReleaseConnect component, which may allow for remote command execution, potentially enabling the...

6.8CVSS6AI score0.00461EPSS
Exploits1References1
CNVD
CNVD
added 2026/02/11 12:0 a.m.3 views

UTT 520W goform/formIpGroupConfig file buffer overflow vulnerability

The UTT 520W is a wireless router from China Aitai UTT. A buffer overflow vulnerability exists in the UTT 520W goform/formIpGroupConfig file, which originates from the failure of the parameter groupName in the file /goform/formIpGroupConfig to correctly validate the length of the input data, and...

9CVSS7.9AI score0.0065EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/02/08 1:21 a.m.6 views

CVE-2026-2071

A vulnerability was found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formP2PLimitConfig. Performing a manipulation of the argument except results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been made publ...

9CVSS8.4AI score0.0065EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/02/08 1:21 a.m.5 views

CVE-2026-2068

A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/formSyslogConf. The manipulation of the argument ServerIp results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used. The vendor was...

9CVSS8.6AI score0.00673EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/02/08 1:21 a.m.4 views

CVE-2026-2066

A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formIpGroupConfig. Executing a manipulation of the argument groupName can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the publi...

9CVSS8.6AI score0.0065EPSS
Exploits1References1
OSV
OSV
added 2026/02/07 1:15 a.m.4 views

CVE-2026-2071

A vulnerability was found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formP2PLimitConfig. Performing a manipulation of the argument except results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been made publ...

8.8CVSS6.2AI score0.0065EPSS
Exploits1References4
NVD
NVD
added 2026/02/07 1:15 a.m.6 views

CVE-2026-2071

A vulnerability was found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formP2PLimitConfig. Performing a manipulation of the argument except results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been made publ...

9CVSS0.0065EPSS
Exploits1References4
CVE
CVE
added 2026/02/07 12:32 a.m.17 views

CVE-2026-2071

CVE-2026-2071 affects UTT 进取 520W, in the strcpy routine of /goform/formP2PLimitConfig. The vulnerability is triggered by manipulating the except argument, causing a buffer overflow and enabling remote exploitation. An exploit has been publicly released. The vendor was notified but did not respon...

9CVSS8.4AI score0.0065EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2026/02/06 11:15 p.m.3 views

CVE-2026-2070

A vulnerability has been found in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /goform/formPolicyRouteConf. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public...

9CVSS0.00663EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/06 10:32 p.m.4 views

CVE-2026-2070

A vulnerability has been found in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /goform/formPolicyRouteConf. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public...

9CVSS6.2AI score0.00663EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/02/06 10:32 p.m.26 views

CVE-2026-2070 UTT 进取 520W formPolicyRouteConf strcpy buffer overflow

A vulnerability has been found in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /goform/formPolicyRouteConf. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public...

9CVSS0.00663EPSS
Exploits1References4
OSV
OSV
added 2026/02/06 10:16 p.m.1 views

CVE-2026-2068

A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/formSyslogConf. The manipulation of the argument ServerIp results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used. The vendor was...

8.8CVSS6.1AI score0.00673EPSS
Exploits1References5
NVD
NVD
added 2026/02/06 10:16 p.m.5 views

CVE-2026-2068

A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/formSyslogConf. The manipulation of the argument ServerIp results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used. The vendor was...

9CVSS0.00673EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/02/06 9:32 p.m.6 views

CVE-2026-2068

A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/formSyslogConf. The manipulation of the argument ServerIp results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used. The vendor was...

9CVSS6.1AI score0.00673EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/06 9:32 p.m.3 views

CVE-2026-2068 UTT 进取 520W formSyslogConf strcpy buffer overflow

A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/formSyslogConf. The manipulation of the argument ServerIp results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used. The vendor was...

9CVSS6.1AI score0.00673EPSS
Exploits1References5
CVE
CVE
added 2026/02/06 9:32 p.m.10 views

CVE-2026-2068

The CVE-2026-2068 entry concerns UTT 进取 520W (version 1.7.7-180627). The vulnerability stems from the strcpy usage in /goform/formSyslogConf where manipulating the ServerIp argument can cause a buffer overflow. It is exploitable remotely, and public PoC/exploits are noted across sources. Multiple...

9CVSS8.6AI score0.00673EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2026/02/06 9:16 p.m.3 views

CVE-2026-2066

A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formIpGroupConfig. Executing a manipulation of the argument groupName can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the publi...

8.8CVSS6.4AI score
Exploits0References5
NVD
NVD
added 2026/02/06 9:16 p.m.5 views

CVE-2026-2067

A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/formTimeGroupConfig. The manipulation of the argument year1 leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed...

9CVSS0.00837EPSS
Exploits1References5
CVE
CVE
added 2026/02/06 9:2 p.m.15 views

CVE-2026-2067

CVE-2026-2067 affects UTT 520W (version 1.7.7-180627). The flaw is a buffer overflow in the strcpy usage of /goform/formTimeGroupConfig’s handling of the year1 argument. This remote-facing condition can be triggered by manipulating input, with the exploit reportedly disclosed publicly. The CVSS d...

9CVSS6.2AI score0.00837EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder