CVE-2025-11653: UTT HiPER 2620G fNTP strcpy buffer overflow
A vulnerability was determined in UTT HiPER 2620G up to 3.1.4. Impacted is the function strcpy of the file /goform/fNTP. This manipulation of the argument NTPServerIP causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11653?
CVE-2025-11653 is rated with a medium severity score due to the potential for remote code execution through a buffer overflow.
How do I fix CVE-2025-11653?
To fix CVE-2025-11653, upgrade the UTT HiPER 2620G to version 3.1.5 or later, which addresses the buffer overflow issue.
What systems are affected by CVE-2025-11653?
CVE-2025-11653 affects UTT HiPER 2620G devices running versions up to and including 3.1.4.
Can CVE-2025-11653 be exploited remotely?
Yes, CVE-2025-11653 can be exploited remotely due to vulnerabilities in the NTPServerIP argument handling.
What is the nature of the vulnerability in CVE-2025-11653?
CVE-2025-11653 involves a buffer overflow caused by improper handling of inputs in the strcpy function.