CVE-2026-0839CWE-119CWE-120

UTT 进取 520W APSecurity strcpy buffer overflow

High · published January 11, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

⚡ A crafty buffer overflow lurks in the UTT 进取 520W software version 1.7.7-180627! An attacker can remotely exploit the function strcpy with a simple manipulation of wepkey1. 💥 Think of it like a suitcase overstuffed with clothes. If you keep cramming items in without checking, the zipper could burst open, spilling everything out! In this case, the overflow allows malicious data to escape into the system. If exploited, an attacker could take control of the device, potentially leading to unauthorized access to sensitive data or services. It's like leaving your front door wide open, inviting anyone to walk right in and wreak havoc! The consequences could be absolutely devastating.

Put simply

Think of it like a suitcase overstuffed with clothes. If you keep cramming items in without checking, the zipper could burst open, spilling everything out! In this case, the overflow allows malicious data to escape into the system. This vulnerability arises from insufficient bounds checking in the strcpy function, allowing attackers to manipulate the wepkey1 argument and trigger a buffer overflow, leading to arbitrary code execution.

What to do

If exploited, an attacker could take control of the device, potentially leading to unauthorized access to sensitive data or services. It's like leaving your front door wide open, inviting anyone to walk right in and wreak havoc! The consequences could be absolutely devastating. Immediate action is crucial! Update to the latest firmware version as soon as it becomes available, and disable remote management features if possible to minimize exposure. Regularly audit your device configurations to ensure they comply with security best practices. You’ve got this! Stay vigilant and proactive, and you’ll be one step ahead of potential threats! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01076 · 64.7th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-11T06:02Z
EPSS history
Timeline
  • 11 JAN 06:02Z
    UTT 进取 520W APSecurity strcpy buffer overflow
    cvelistv5