CVE 9.3 CRITICAL

UTT 进取 512W formConfigFastDirectionW strcpy buffer overflow_CVE-2025-14535

December 11, 2025 invoker category_cve

9.3 / 10

CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. The manipulation of the argument ssid leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

AI Analysis

Buffer overflow vulnerability in the strcpy function of the /goform/formConfigFastDirectionW file, allowing remote attackers to exploit the vulnerability via the ssid argument.

Basic Information

ID CVE-2025-14535

Source VulDB

Published Dec 11, 2025 at 19:32

Affected Product

Vendor UTT

Product 进取 512W

Version 3.1.7.7-171114

Affected Versions UTT 进取 512W 3.1.7.7-171114

CWE Classification

CWE-120 CWE-119

AI Assessment

AI Score 9.3 / 10

AI Severity Critical

Vendor UTT

Product 进取 512W

Version 3.1.7.7-171114

References

{
    "lastseen": "",
    "description": "A vulnerability was identified in UTT \u8fdb\u53d6 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. The manipulation of the argument ssid leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.",
    "published": "2025-12-11T19:32:05.964Z",
    "modified": "2025-12-11T19:32:05.964Z",
    "type": "cve",
    "title": "UTT \u8fdb\u53d6 512W formConfigFastDirectionW strcpy buffer overflow",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.335874\nhttps://vuldb.com/?ctiid.335874\nhttps://vuldb.com/?submit.703621\nhttps://github.com/maximdevere/CVE2/issues/7",
    "id": "CVE-2025-14535",
    "bulletinFamily": "",
    "cwe": [
        "CWE-120",
        "CWE-119"
    ],
    "cvelist": null,
    "sourceData": "UTT \u8fdb\u53d6 512W 3.1.7.7-171114",
    "sourceHref": "",
    "cvss": {
        "score": 9.3,
        "severity": "CRITICAL",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "\u8fdb\u53d6 512W",
    "version": "3.1.7.7-171114",
    "vendor": "UTT",
    "ai_description": "Buffer overflow vulnerability in the strcpy function of the /goform/formConfigFastDirectionW file, allowing remote attackers to exploit the vulnerability via the ssid argument.",
    "ai_severity": "Critical",
    "ai_vendor": "UTT",
    "ai_product": "\u8fdb\u53d6 512W",
    "ai_version": "3.1.7.7-171114",
    "ai_score": 9.3
}

💭 Join the Security Discussion ❌ Cancel Reply