CVE-2025-14572CWE-119

CVE-2025-14572

High · published December 13, 2025

CVSS v3.1
8.8
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

⚡ A sneaky memory corruption vulnerability lurks in UTT 进取 512W up to version 1.7.7-171114, just waiting for someone to exploit it! 🔥 Think of it like a poorly constructed bridge that can collapse if a car hits a weak spot — that’s the risk here with this file manipulation! If exploited, an attacker could cause unpredictable behavior or even crash the system entirely, leading to denial of service. This could ultimately expose sensitive information or allow unauthorized access, creating chaos in your network. Protecting your assets is crucial!

Put simply

Think of it like a poorly constructed bridge that can collapse if a car hits a weak spot — that’s the risk here with this file manipulation! This vulnerability arises from a manipulation of the 'hidcontact' argument within the '/goform/formWebAuthGlobalConfig' file, resulting in memory corruption that can be exploited remotely.

What to do

If exploited, an attacker could cause unpredictable behavior or even crash the system entirely, leading to denial of service. This could ultimately expose sensitive information or allow unauthorized access, creating chaos in your network. Protecting your assets is crucial! Immediate patching is essential; make sure to upgrade to a fixed version as soon as it's available. Additionally, review your configurations and monitor any unusual activity related to this file. Stay alert! Don't panic! By acting quickly and following these steps, you can safeguard your system and maintain that security hero status! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03471 · 89.0th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-12-13T01:15Z
Affected products (1)
ProductVersionsFixed in
utt/512w_firmware≤ 1.7.7-171114—
References (4)
EPSS history
Timeline
  • 12 DEC 19:32Z
    UTT 进取 512W formWebAuthGlobalConfig memory corruption
    cvelistv5