CVE-2025-10170

A security vulnerability has been detected in UTT 1200GW up to 3.0.0-170831. This affects the function sub_4B48F8 of the file /goform/formApLbConfig. Such manipulation of the argument loadBalanceNameOld leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
Link Resource
https://github.com/lin-3-start/lin-cve/blob/main/UTT%201200GW-2/UTT%201200GW-2.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.323205 Permissions Required VDB Entry
https://vuldb.com/?id.323205 Third Party Advisory VDB Entry
https://vuldb.com/?submit.636697 Third Party Advisory VDB Entry
https://github.com/lin-3-start/lin-cve/blob/main/UTT%201200GW-2/UTT%201200GW-2.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:utt:1200gw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:utt:1200gw:-:*:*:*:*:*:*:*

History

08 Jan 2026, 16:15

Type Values Removed Values Added
References () https://github.com/lin-3-start/lin-cve/blob/main/UTT%201200GW-2/UTT%201200GW-2.md - () https://github.com/lin-3-start/lin-cve/blob/main/UTT%201200GW-2/UTT%201200GW-2.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.323205 - () https://vuldb.com/?ctiid.323205 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.323205 - () https://vuldb.com/?id.323205 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.636697 - () https://vuldb.com/?submit.636697 - Third Party Advisory, VDB Entry
First Time Utt
Utt 1200gw Firmware
Utt 1200gw
CPE cpe:2.3:h:utt:1200gw:-:*:*:*:*:*:*:*
cpe:2.3:o:utt:1200gw_firmware:*:*:*:*:*:*:*:*

10 Sep 2025, 14:15

Type Values Removed Values Added
References () https://github.com/lin-3-start/lin-cve/blob/main/UTT%201200GW-2/UTT%201200GW-2.md - () https://github.com/lin-3-start/lin-cve/blob/main/UTT%201200GW-2/UTT%201200GW-2.md -

09 Sep 2025, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-09-09 21:15

Updated : 2026-01-08 16:15


NVD link : CVE-2025-10170

Mitre link : CVE-2025-10170

CVE.ORG link : CVE-2025-10170


JSON object : View

Products Affected

utt

  • 1200gw_firmware
  • 1200gw
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')