CVE-2026-2067CWE-119CWE-120

UTT 进取 520W formTimeGroupConfig strcpy buffer overflow

High · published February 6, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
61.6
In the wild
Unconfirmed
What it is

🚨 A sneaky buffer overflow lurking in UTT 进取 520W could let attackers remotely take control with just a crafty argument! ⚡ Think of it like a waiter who misreads a special request and accidentally pours in way too much syrup into a drink, causing it to overflow and spill everywhere. In this scenario, the overflowing data can create a mess that attackers can exploit! An attacker could trigger this vulnerability to manipulate the system, leading to unexpected behaviors, data corruption, or even full control over the device. If successful, this could lead to breaches of sensitive information or disruption of services, which is absolutely devastating!

Put simply

Think of it like a waiter who misreads a special request and accidentally pours in way too much syrup into a drink, causing it to overflow and spill everywhere. In this scenario, the overflowing data can create a mess that attackers can exploit! The vulnerability stems from a buffer overflow in the strcpy function in the /goform/formTimeGroupConfig file. By manipulating the argument year1, an attacker can overflow the buffer and potentially execute arbitrary code.

What to do

An attacker could trigger this vulnerability to manipulate the system, leading to unexpected behaviors, data corruption, or even full control over the device. If successful, this could lead to breaches of sensitive information or disruption of services, which is absolutely devastating! Immediately update to the latest version of UTT 进取 to mitigate this vulnerability. Regularly audit your systems and configurations to ensure no unauthorized access is possible. Consider implementing additional input validation measures to prevent similar issues in the future. You've got this! With these steps, you can secure your systems and keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00972 · 61.6th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-06T21:02Z
EPSS history
Timeline
  • 06 FEB 21:02Z
    UTT 进取 520W formTimeGroupConfig strcpy buffer overflow
    cvelistv5