CVE-2025-15460: UTT 进取 520W formPptpClientConfig strcpy buffer overflow
A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formPptpClientConfig. Performing a manipulation of the argument EncryptionMode results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15460?
CVE-2025-15460 is considered a high severity vulnerability due to its potential for remote exploitation via buffer overflow.
How do I fix CVE-2025-15460?
To fix CVE-2025-15460, it is recommended to update the UTT 进取 520W device to the latest firmware version that addresses this vulnerability.
What kind of attack can be executed using CVE-2025-15460?
CVE-2025-15460 allows for remote exploitation through a buffer overflow that can compromise the affected device.
Which devices are affected by CVE-2025-15460?
CVE-2025-15460 affects the UTT 进取 520W device running version 1.7.7-180627.
Is it possible for an attacker to exploit CVE-2025-15460 remotely?
Yes, CVE-2025-15460 can be exploited remotely, allowing attackers to perform the buffer overflow attack from a distance.