CVE-2025-15461CWE-119CWE-120

CVE-2025-15461

High · published January 5, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

⚡ A remote buffer overflow is lurking in the UTT 进取 520W 1.7.7-180627! Just a crafty argument manipulation can turn strcpy into a wide-open door for attackers. 🔥 Think of it like a waiter swapping out your regular condiment for a gallon of hot sauce without checking; suddenly, your tasty meal becomes a fiery disaster that nobody asked for! If exploited, an attacker could totally hijack the system, leading to unauthorized access, data compromise, or even full system control. This means they could manipulate or delete crucial data, causing absolute chaos!

Put simply

Think of it like a waiter swapping out your regular condiment for a gallon of hot sauce without checking; suddenly, your tasty meal becomes a fiery disaster that nobody asked for! This vulnerability arises from a buffer overflow triggered by improper handling of the `selDateType` argument in the `strcpy` function, allowing for remote execution of malicious code.

What to do

If exploited, an attacker could totally hijack the system, leading to unauthorized access, data compromise, or even full system control. This means they could manipulate or delete crucial data, causing absolute chaos! To shield against this vulnerability, patch to version 1.7.7-180628 or later immediately. Additionally, review input validation processes to ensure no unsafe data can be processed. Don't wait; secure your system now! You've got this! Implement these steps, and you'll be taking the reins of security in no time. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00881 · 58.8th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-05T12:15Z
Affected products (1)
ProductVersionsFixed in
utt/520w_firmware≤ 1.7.7-180627—
References (6)
EPSS history
Timeline
  • 05 JAN 06:32Z
    UTT 进取 520W formTaskEdit strcpy buffer overflow
    cvelistv5