CVE-2025-15092CWE-119CWE-120

CVE-2025-15092

High · published December 26, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

⚡ A remote buffer overflow vulnerability lurks in UTT 进取 512W versions up to 1.7.7-171114, and it’s as dangerous as it sounds! Think of it like a restaurant overfilling a takeout container. If you pack it too tightly, the lid pops off, and everything spills out. In this case, this overflow allows attackers to unleash chaos on your system by manipulating the `remark` argument in the `/goform/ConfigExceptMSN` function. An attacker could remotely exploit this vulnerability to run harmful code on your device, potentially gaining full control. Imagine them sneaking in through the back door and changing settings, stealing data, or disrupting services—yikes! This could lead to serious consequences for your network and user data.

Put simply

Think of it like a restaurant overfilling a takeout container. If you pack it too tightly, the lid pops off, and everything spills out. In this case, this overflow allows attackers to unleash chaos on your system by manipulating the `remark` argument in the `/goform/ConfigExceptMSN` function. The vulnerability arises from a buffer overflow in the `strcpy` function used in a specific configuration file, allowing an attacker to manipulate input to execute arbitrary code on the device.

What to do

An attacker could remotely exploit this vulnerability to run harmful code on your device, potentially gaining full control. Imagine them sneaking in through the back door and changing settings, stealing data, or disrupting services—yikes! This could lead to serious consequences for your network and user data. To protect yourself, immediately patch your UTT 进取 512W device to version 1.7.7-171115 or later. Additionally, review your security policies and monitor your network to detect any suspicious activity. Don't forget to educate your team on the importance of secure coding practices to prevent similar issues in the future! You've got this! With these steps, you're on your way to securing your system and becoming a security hero! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00848 · 57.7th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-12-26T06:15Z
Affected products (1)
ProductVersionsFixed in
utt/512w_firmware≤ 1.7.7-171114—
References (6)
EPSS history
Timeline
  • 26 DEC 00:02Z
    UTT 进取 512W ConfigExceptMSN strcpy buffer overflow
    cvelistv5