CVE-2026-0837: UTT 进取 520W formFireWall strcpy buffer overflow
A vulnerability was identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formFireWall. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0837?
CVE-2026-0837 has a high severity rating due to its remote exploitability and potential for buffer overflow attacks.
How do I fix CVE-2026-0837?
To fix CVE-2026-0837, update the UTT 进取 520W firmware to a version that addresses the buffer overflow vulnerability.
Who is affected by CVE-2026-0837?
CVE-2026-0837 affects users of the UTT 进取 520W router running firmware version 1.7.7-180627.
Can CVE-2026-0837 be exploited remotely?
Yes, CVE-2026-0837 can be exploited remotely through the strcpy function in the /goform/formFireWall file.
What kind of vulnerability is CVE-2026-0837?
CVE-2026-0837 is a buffer overflow vulnerability that occurs due to improper handling of user input in the firmware.