CVE-2025-13442: UTT 进取 750W formPdbUpConfig system command injection
A security vulnerability has been detected in UTT 进取 750W up to 3.2.2-191225. Affected by this vulnerability is the function system of the file /goform/formPdbUpConfig. Such manipulation of the argument policyNames leads to command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13442?
CVE-2025-13442 is classified as a critical security vulnerability due to the potential for remote command injection.
How do I fix CVE-2025-13442?
To mitigate CVE-2025-13442, upgrade the UTT 进取 750W firmware to version 3.2.2-191226 or later.
What systems are affected by CVE-2025-13442?
CVE-2025-13442 affects UTT 进取 750W devices running firmware versions up to 3.2.2-191225.
What can an attacker achieve by exploiting CVE-2025-13442?
Exploiting CVE-2025-13442 allows an attacker to execute arbitrary commands on the affected system.
Is CVE-2025-13442 exploitable remotely?
Yes, CVE-2025-13442 can be exploited remotely, making it particularly dangerous.