CVE-2026-2066: UTT 进取 520W formIpGroupConfig strcpy buffer overflow
A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formIpGroupConfig. Executing a manipulation of the argument groupName can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2066?
CVE-2026-2066 has a critical severity rating due to the potential for remote exploitation leading to a buffer overflow.
How do I fix CVE-2026-2066?
To fix CVE-2026-2066, update the UTT 进取 520W firmware to the latest version provided by the vendor.
What type of vulnerability is CVE-2026-2066?
CVE-2026-2066 is categorized as a buffer overflow vulnerability affecting the strcpy function in the UTT 进取 520W.
Can CVE-2026-2066 be exploited remotely?
Yes, CVE-2026-2066 can be exploited remotely by manipulating the argument groupName.
Which software versions are affected by CVE-2026-2066?
CVE-2026-2066 affects UTT 进取 520W version 1.7.7-180627.