CVE 9.3 CRITICAL

UTT 进取 512W Endpoint formNatStaticMap strcpy buffer overflow_CVE-2025-14534

December 11, 2025 invoker category_cve

9.3 / 10

CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was determined in UTT 进取 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform/formNatStaticMap of the component Endpoint. Executing manipulation of the argument NatBind can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

AI Analysis

Buffer overflow vulnerability in UTT 进取 512W Endpoint formNatStaticMap strcpy function, allowing remote exploitation

Basic Information

ID CVE-2025-14534

Source VulDB

Published Dec 11, 2025 at 19:02

Modified Dec 11, 2025 at 19:45

Affected Product

Vendor UTT

Product 进取 512W

Version 3.1.7.7-171114

Affected Versions UTT 进取 512W 3.1.7.7-171114

CWE Classification

CWE-120 CWE-119

AI Assessment

AI Score 9.3 / 10

AI Severity Critical

Vendor UTT

Product 进取 512W

Version 3.1.7.7-171114

References

{
    "lastseen": "",
    "description": "A vulnerability was determined in UTT \u8fdb\u53d6 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform/formNatStaticMap of the component Endpoint. Executing manipulation of the argument NatBind can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.",
    "published": "2025-12-11T19:02:06.276Z",
    "modified": "2025-12-11T19:45:44.388Z",
    "type": "cve",
    "title": "UTT \u8fdb\u53d6 512W Endpoint formNatStaticMap strcpy buffer overflow",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.335873\nhttps://vuldb.com/?ctiid.335873\nhttps://vuldb.com/?submit.703620\nhttps://github.com/maximdevere/CVE2/issues/6",
    "id": "CVE-2025-14534",
    "bulletinFamily": "",
    "cwe": [
        "CWE-120",
        "CWE-119"
    ],
    "cvelist": null,
    "sourceData": "UTT \u8fdb\u53d6 512W 3.1.7.7-171114",
    "sourceHref": "",
    "cvss": {
        "score": 9.3,
        "severity": "CRITICAL",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "\u8fdb\u53d6 512W",
    "version": "3.1.7.7-171114",
    "vendor": "UTT",
    "ai_description": "Buffer overflow vulnerability in UTT \u8fdb\u53d6 512W Endpoint formNatStaticMap strcpy function, allowing remote exploitation",
    "ai_severity": "Critical",
    "ai_vendor": "UTT",
    "ai_product": "\u8fdb\u53d6 512W",
    "ai_version": "3.1.7.7-171114",
    "ai_score": 9.3
}

💭 Join the Security Discussion ❌ Cancel Reply