CVE-2025-14191: UTT 进取 512W formP2PLimitConfig strcpy buffer overflow
A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formP2PLimitConfig. Such manipulation of the argument except leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14191?
The severity of CVE-2025-14191 is classified as high due to its potential for remote exploitation and its buffer overflow nature.
How do I fix CVE-2025-14191?
To fix CVE-2025-14191, update UTT 进取 512W to version 1.7.7-171115 or later.
What systems are affected by CVE-2025-14191?
CVE-2025-14191 affects UTT 进取 512W devices running versions up to and including 1.7.7-171114.
Can CVE-2025-14191 be exploited remotely?
Yes, CVE-2025-14191 can be exploited remotely, making it a serious security concern.
What type of vulnerability is CVE-2025-14191?
CVE-2025-14191 is a buffer overflow vulnerability that occurs in the strcpy function within a specific configuration file.