UTT 进取 520W formPolicyRouteConf strcpy buffer overflow_CVE-2026-2070

{
    "lastseen": "",
    "description": "A vulnerability has been found in UTT \u8fdb\u53d6 520W 1.7.7-180627. The affected element is the function strcpy of the file /goform/formPolicyRouteConf. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
    "published": "2026-02-06T22:32:06.317Z",
    "modified": "2026-02-06T22:32:06.317Z",
    "type": "cve",
    "title": "UTT \u8fdb\u53d6 520W formPolicyRouteConf strcpy buffer overflow",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.344637\nhttps://vuldb.com/?ctiid.344637\nhttps://vuldb.com/?submit.745264\nhttps://github.com/cymiao1978/cve/blob/main/new/39.md",
    "id": "CVE-2026-2070",
    "bulletinFamily": "",
    "cwe": [
        "CWE-120",
        "CWE-119"
    ],
    "cvelist": null,
    "sourceData": "UTT \u8fdb\u53d6 520W 1.7.7-180627",
    "sourceHref": "",
    "cvss": {
        "score": 8.7,
        "severity": "HIGH",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "\u8fdb\u53d6 520W",
    "version": "1.7.7-180627",
    "vendor": "UTT",
    "ai_description": "Buffer overflow vulnerability in UTT \u8fdb\u53d6 520W 1.7.7-180627 via manipulation of the GroupName argument in the strcpy function of the /goform/formPolicyRouteConf file, allowing remote exploitation.",
    "ai_severity": "High",
    "ai_vendor": "UTT",
    "ai_product": "\u8fdb\u53d6 520W",
    "ai_version": "1.7.7-180627",
    "ai_score": 8.7
}