CVE-2025-10172

High CVSS: 7.4

A flaw has been found in UTT 750W up to 3.2.2-191225. This issue affects some unknown processing of the file /goform/formPictureUrl. Executing manipulation of the argument importpictureurl can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Vendor

Utt

Product

750w Firmware

CWE

CWE-119

Yayın Tarihi

2025-09-09 23:15:29

Güncelleme

2026-01-12 17:33:23

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-119 750w Firmware HIGH Utt 2025

Referanslar

https://github.com/cymiao1978/cve/blob/main/1.md https://vuldb.com/?ctiid.323207 https://vuldb.com/?id.323207 https://vuldb.com/?submit.639030 https://github.com/cymiao1978/cve/blob/main/1.md

Benzer Kayıtlar

High

CVE-2026-3815

A weakness has been identified in UTT HiPER 810G up to 1.7.7-1711. This affects the function strcpy of the file /goform/…

High

CVE-2026-3814

A security flaw has been discovered in UTT HiPER 810G up to 1.7.7-1711. Affected by this issue is the function strcpy of…

High

CVE-2026-3700

A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. Affected is the function strcpy of the file /goform…

High

CVE-2026-3699

A security flaw has been discovered in UTT HiPER 810G up to 1.7.7-171114. This impacts the function strcpy of the file /…

High

CVE-2026-3698

A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. This affects the function strcpy of the file /gofor…

High

CVE-2026-3016

A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. The affected element is the function strcpy of the…