CVE-2025-15089

A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. This affects the function strcpy of the file /goform/APSecurity. The manipulation of the argument wepkey1 leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
References
Link Resource
https://github.com/cymiao1978/cve/blob/main/new/14.md Exploit Third Party Advisory
https://github.com/cymiao1978/cve/blob/main/new/14.md#poc Exploit Third Party Advisory
https://vuldb.com/?ctiid.338418 Permissions Required VDB Entry
https://vuldb.com/?id.338418 Third Party Advisory VDB Entry
https://vuldb.com/?submit.708348 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:utt:512w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:utt:512w:3.0:*:*:*:*:*:*:*

History

31 Dec 2025, 18:56

Type Values Removed Values Added
CPE cpe:2.3:o:utt:512w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:utt:512w:3.0:*:*:*:*:*:*:*
First Time Utt 512w Firmware
Utt
Utt 512w
References () https://github.com/cymiao1978/cve/blob/main/new/14.md - () https://github.com/cymiao1978/cve/blob/main/new/14.md - Exploit, Third Party Advisory
References () https://github.com/cymiao1978/cve/blob/main/new/14.md#poc - () https://github.com/cymiao1978/cve/blob/main/new/14.md#poc - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.338418 - () https://vuldb.com/?ctiid.338418 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.338418 - () https://vuldb.com/?id.338418 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.708348 - () https://vuldb.com/?submit.708348 - Third Party Advisory, VDB Entry

25 Dec 2025, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-12-25 23:15

Updated : 2025-12-31 18:56


NVD link : CVE-2025-15089

Mitre link : CVE-2025-15089

CVE.ORG link : CVE-2025-15089


JSON object : View

Products Affected

utt

  • 512w_firmware
  • 512w
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')