CVE-2025-15428: UTT 进取 512W formRemoteControl strcpy buffer overflow
A weakness has been identified in UTT 进取 512W 1.7.7-171114. Affected is the function strcpy of the file /goform/formRemoteControl. This manipulation of the argument Profile causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15428?
CVE-2025-15428 has been classified with a moderate severity level due to its potential for remote exploitation.
How do I fix CVE-2025-15428?
To fix CVE-2025-15428, update UTT 进取 512W to the latest version that addresses the buffer overflow vulnerability.
Which versions of UTT 进取 512W are affected by CVE-2025-15428?
CVE-2025-15428 affects UTT 进取 512W version 1.7.7-171114.
Can CVE-2025-15428 be exploited remotely?
Yes, CVE-2025-15428 can be exploited remotely through the affected function in the device.
What is the nature of the vulnerability in CVE-2025-15428?
CVE-2025-15428 involves a buffer overflow caused by improper handling of the strcpy function in the device's firmware.