CVE-2025-14534CWE-119CWE-120

CVE-2025-14534

Critical · published December 12, 2025

CVSS v3.1
9.8
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

🔥 A buffer overflow vulnerability in UTT 进取 512W could let attackers remotely manipulate your system with a mere argument tweak! Think of it like a restaurant where the chef accepts any order without checking the recipe. If the chef gets a faulty order, the whole kitchen might overflow with chaos! An attacker could unleash a wave of destruction, remotely executing malicious code and taking control of your system like an uninvited guest running amok in your home. This could lead to unauthorized data access, data corruption, or even a complete system takeover!

Put simply

Think of it like a restaurant where the chef accepts any order without checking the recipe. If the chef gets a faulty order, the whole kitchen might overflow with chaos! This vulnerability resides in the strcpy function of the /goform/formNatStaticMap file, where improper handling of the NatBind argument can result in a buffer overflow, allowing attackers to execute arbitrary code remotely.

What to do

An attacker could unleash a wave of destruction, remotely executing malicious code and taking control of your system like an uninvited guest running amok in your home. This could lead to unauthorized data access, data corruption, or even a complete system takeover! Update your UTT 进取 512W system to version 3.1.7.8 or later to patch this critical vulnerability. Ensure you conduct regular security audits and monitor for any suspicious activity. Don't forget to train your team to handle similar issues in the future! You’ve got this! By taking these steps, you'll fortify your system against this vulnerability in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.05721 · 93.0th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-12-12T00:15Z
Affected products (1)
ProductVersionsFixed in
utt/512w_firmware≤ 1.7.7-171114—
References (4)
EPSS history
Timeline
  • 11 DEC 19:02Z
    UTT 进取 512W Endpoint formNatStaticMap strcpy buffer overflow
    cvelistv5