CVE-2026-1139CWE-119CWE-120

UTT 进取 520W ConfigExceptMSN strcpy buffer overflow

High · published January 19, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
62.3
In the wild
Unconfirmed
What it is

🚨 A sneaky buffer overflow in UTT 进取 520W could let remote attackers crash your system with just a malformed request! ⚡ Think of buffer overflow like a restaurant where a customer orders way too much food, overwhelming the kitchen and causing chaos! Here, the strcpy function is like the waiter who can't handle the order, leading to a messy kitchen disaster. If exploited, this vulnerability could allow attackers to inject malicious code, gain control of your system, or even crash it entirely—an absolute nightmare for any network admin! The risk is significant, especially since the public has already been informed of this flaw and could attempt attacks at any moment.

Put simply

Think of buffer overflow like a restaurant where a customer orders way too much food, overwhelming the kitchen and causing chaos! Here, the strcpy function is like the waiter who can't handle the order, leading to a messy kitchen disaster. This vulnerability stems from a buffer overflow in the strcpy function within the /goform/ConfigExceptMSN file, which improperly handles input, making it susceptible to remote exploitation.

What to do

If exploited, this vulnerability could allow attackers to inject malicious code, gain control of your system, or even crash it entirely—an absolute nightmare for any network admin! The risk is significant, especially since the public has already been informed of this flaw and could attempt attacks at any moment. To protect yourself, patch the vulnerability immediately by updating to a secure version of UTT 进取. Since the vendor has been unresponsive, consider implementing input validation to limit the data handled by strcpy. Don't forget to audit your systems to ensure there are no lingering exposures! You've got this! Follow these steps, and you'll bolster your defenses in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00995 · 62.3th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-19T05:02Z
EPSS history
Timeline
  • 19 JAN 05:02Z
    UTT 进取 520W ConfigExceptMSN strcpy buffer overflow
    cvelistv5