CVE-2025-15089CWE-119CWE-120

CVE-2025-15089

High · published December 26, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

⚡ A remote attacker can exploit a buffer overflow vulnerability in UTT 进取 512W up to version 1.7.7-171114 simply by manipulating the WEP key! 😱 Think of it like a restaurant where a customer can write in their own special requests on the order form, and if the kitchen doesn't check it, they might accidentally serve something explosive instead of the usual meal! 🍽️ This oversight allows an attacker to execute arbitrary code remotely, potentially leading them to take full control of the device. Imagine someone walking into your home, rifling through your belongings, and even changing the locks – all while you’re out! That's how devastating this vulnerability could be!

Put simply

Think of it like a restaurant where a customer can write in their own special requests on the order form, and if the kitchen doesn't check it, they might accidentally serve something explosive instead of the usual meal! 🍽️ The vulnerability in UTT 进取 512W occurs due to improper handling of the WEP key input in the strcpy function, allowing for a buffer overflow that an attacker can exploit to run malicious code remotely.

What to do

This oversight allows an attacker to execute arbitrary code remotely, potentially leading them to take full control of the device. Imagine someone walking into your home, rifling through your belongings, and even changing the locks – all while you’re out! That's how devastating this vulnerability could be! Immediately patch to the newest version if available, or disable remote access to the device as a temporary measure. Regularly check for firmware updates and apply them promptly to enhance security. 🔒 You've got this! By taking these steps, you're stepping up as a security hero and keeping your network safe! 🦸‍♂️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00770 · 55.2th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-12-26T04:15Z
Affected products (1)
ProductVersionsFixed in
utt/512w_firmware≤ 1.7.7-171114—
References (5)
EPSS history
Timeline
  • 25 DEC 22:32Z
    UTT 进取 512W APSecurity strcpy buffer overflow
    cvelistv5