CVE-2026-2182: UTT 进取 521G setSysAdm doSystem command injection
A weakness has been identified in UTT 进取 521G 3.1.1-190816. Affected by this issue is the function doSystem of the file /goform/setSysAdm. Executing a manipulation of the argument passwd1 can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2182?
CVE-2026-2182 has been classified as a high severity vulnerability due to its potential for remote command injection.
How do I fix CVE-2026-2182?
To remediate CVE-2026-2182, update the UTT 进取 521G device to the latest firmware that addresses this vulnerability.
What is the impact of CVE-2026-2182?
CVE-2026-2182 allows an attacker to execute arbitrary commands on the affected system through the manipulation of input parameters.
What products are affected by CVE-2026-2182?
CVE-2026-2182 affects the UTT 进取 521G version 3.1.1-190816.
Can CVE-2026-2182 be exploited remotely?
Yes, CVE-2026-2182 can be exploited remotely, allowing unauthorized command execution on the device.