CVE-2025-15459: UTT 进取 520W formUser strcpy buffer overflow
A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formUser. Such manipulation of the argument passwd1 leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15459?
CVE-2025-15459 is classified as a high-severity vulnerability due to its potential for remote exploitation leading to a buffer overflow.
How do I fix CVE-2025-15459?
To fix CVE-2025-15459, it is recommended to update the UTT 进取 520W firmware to the latest version provided by the vendor.
What does CVE-2025-15459 affect?
CVE-2025-15459 affects the UTT 进取 520W device specifically in the strcpy function located in the /goform/formUser file.
Can CVE-2025-15459 be exploited remotely?
Yes, CVE-2025-15459 can be exploited remotely, allowing attackers to execute arbitrary code via buffer overflow.
What is the impact of CVE-2025-15459?
The impact of CVE-2025-15459 includes potential unauthorized access and control over the affected UTT 进取 520W device.