CVE-2025-6097

CVE-2025-6097 affects UTT Progress 750W (up to v5.0). The issue lies in formDefineManagement in /goform/setSysAdm within Administrator Password Handler, where improper handling of the passwd1 parameter enables unauthenticated password changes. Remote exploitation is possible and the vulnerability...

CVE-2025-6097: Unverified Password Change

A vulnerability was found in UTT 进取 750W up to 5.0 and classified as critical. Affected by this issue is the function formDefineManagement of the file /goform/setSysAdm of the component Administrator Password Handler. The manipulation of the argument passwd1 leads to unverified password change. T...

PT-2025-25507

Name of the Vulnerable Software and Affected Versions UTT 进取 750W versions up to 5.0 Description A critical issue was found, affecting the function formDefineManagement of the file /goform/setSysAdm in the Administrator Password Handler component. The manipulation of the passwd1 argument leads to...

UTT 750W 安全漏洞

The UTT Progress 750W is an enterprise-grade dual-band wireless router from Atech Technology UTT, which is aimed at SMB network environments. The UTT Progress 750W suffers from a buffer overflow vulnerability, which originates from the operation of the strcpy function in the file /goform/setSysAd...

PT-2025-25508 · Utt · Utt 进取 750W

Name of the Vulnerable Software and Affected Versions: UTT 进取 750W versions up to 5.0 Description: A critical issue affects the strcpy function of the /goform/setSysAdm component API. The manipulation of the passwd1 argument leads to a buffer overflow. This issue can be exploited remotely...

CVE-2025-6098: Buffer Copy without Checking Size of Input

A vulnerability was found in UTT 进取 750W up to 5.0. It has been classified as critical. This affects the function strcpy of the file /goform/setSysAdm of the component API. The manipulation of the argument passwd1 leads to buffer overflow. It is possible to initiate the attack remotely. The explo...