CVE-2026-2068CWE-119CWE-120

UTT 进取 520W formSyslogConf strcpy buffer overflow

High · published February 6, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

⚡ A simple argument manipulation is all it takes for a buffer overflow in your UTT 进取 520W device! Think of this like a restaurant that overfills a pot with soup—eventually, it spills over, causing a big mess! In this case, the ServerIp argument is the overzealous chef, leading to unexpected behavior and potential chaos. An attacker could remotely exploit this vulnerability to execute arbitrary code, potentially taking control of your device. This could mean compromising sensitive data, altering configurations, or even launching further attacks on your network—absolutely devastating!

Put simply

Think of this like a restaurant that overfills a pot with soup—eventually, it spills over, causing a big mess! In this case, the ServerIp argument is the overzealous chef, leading to unexpected behavior and potential chaos. This vulnerability is caused by improper handling of the strcpy function in the /goform/formSyslogConf file. When the ServerIp argument is manipulated, it can lead to a buffer overflow, allowing for dangerous code execution.

What to do

An attacker could remotely exploit this vulnerability to execute arbitrary code, potentially taking control of your device. This could mean compromising sensitive data, altering configurations, or even launching further attacks on your network—absolutely devastating! To safeguard your system, patch the UTT 进取 520W to version 1.7.7-180628 or later immediately. Additionally, consider implementing network controls to limit access while you secure your environment. Regular updates and monitoring for unusual activity are key! You've got this! Take these steps to fortify your defenses and keep your system safe! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00781 · 55.5th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-06T21:32Z
EPSS history
Timeline
  • 06 FEB 21:32Z
    UTT 进取 520W formSyslogConf strcpy buffer overflow
    cvelistv5