CVE-2026-1139: UTT 进取 520W ConfigExceptMSN strcpy buffer overflow
A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/ConfigExceptMSN. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1139?
CVE-2026-1139 is a high severity vulnerability due to its potential for remote exploitation via buffer overflow.
How do I fix CVE-2026-1139?
To fix CVE-2026-1139, ensure that your UTT 进取 520W firmware is updated to the latest version that addresses this vulnerability.
Who is affected by CVE-2026-1139?
CVE-2026-1139 affects devices running UTT 进取 520W version 1.7.7-180627.
Can CVE-2026-1139 be exploited remotely?
Yes, CVE-2026-1139 can be exploited remotely, allowing attackers to initiate the attack over a network.
What entails a buffer overflow in the context of CVE-2026-1139?
In the context of CVE-2026-1139, a buffer overflow occurs when the strcpy function writes more data to a buffer than it can hold, potentially leading to arbitrary code execution.