HIGH🇬🇧 English

CVE-2026-2070

CVSS 7.4v4.0pub. 2026-02-06upd. 2026-02-13

A vulnerability has been found in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /goform/formPolicyRouteConf. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

oryginał EN
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Utt 520w

    HW
    Utt
    3.0

  • Utt 520w Firmware

    OS
    Utt
    1.7.7-180627
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2026-31059CRITICAL9.8PL ✓ten sam produkt

RCE w UTT HiPER 520W — wykonanie dowolnych poleceń przez /goform/formDia

CVE-2026-2071HIGH7.4ten sam produkt

A vulnerability was found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file...

CVE-2026-2066HIGH7.4ten sam produkt

A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /gofo...

CVE-2026-2067HIGH7.4ten sam produkt

A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. This vulnerability affects the functio...

CVE-2026-2068HIGH7.4ten sam produkt

A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /...

CVE-2026-2070 — HIGH 7.4 | CVEbaza.pl