CVE-2025-11323: UTT 1250GW formUserStatusRemark strcpy buffer overflow
A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation of the argument Username causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11323?
CVE-2025-11323 has a high severity rating due to the potential for remote buffer overflow exploitation.
How do I fix CVE-2025-11323?
To mitigate CVE-2025-11323, upgrade to a version of UTT 1250GW later than v2v3.2.2-200710.
What systems are affected by CVE-2025-11323?
CVE-2025-11323 affects the UTT 1250GW router up to version v2v3.2.2-200710.
Can CVE-2025-11323 be exploited remotely?
Yes, CVE-2025-11323 can be exploited remotely through vulnerabilities in the strcpy function.
What type of vulnerability is CVE-2025-11323?
CVE-2025-11323 is classified as a buffer overflow vulnerability.