CVE-2025-11652
BaseFortify
Publication date: 2025-10-13
Last updated on: 2025-10-14
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| utt | θΏε_518g | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-11652 is a critical buffer overflow vulnerability in the UTT θΏε 518G router firmware up to version V3v3.2.7-210919-161313. It occurs due to unsafe copying of user-controlled input (argument txtMin2) without proper bounds checking in the /goform/formTaskEdit_ap endpoint. This flaw allows an attacker to send a specially crafted HTTP POST request that overflows a buffer, potentially leading to denial of service or arbitrary command execution on the device. [2, 3]
How can this vulnerability impact me? :
Exploitation of this vulnerability can allow a remote attacker to take full control of the affected router, compromising its confidentiality, integrity, and availability. This can lead to denial of service or arbitrary command execution, which may disrupt network operations or allow unauthorized access to network resources. [2, 3]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring for HTTP POST requests sent to the endpoint /goform/formTaskEdit_ap with suspicious or unusually large payloads in the txtMin2 parameter, which triggers the buffer overflow. Since a proof-of-concept exploit is publicly available, you may use it to test your system in a controlled environment. Specific detection commands are not provided in the resources, but inspecting HTTP traffic for POST requests to /goform/formTaskEdit_ap and analyzing the txtMin2 argument size or content is recommended. [2, 3]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include discontinuing use of the affected UTT θΏε 518G device firmware versions up to V3v3.2.7-210919-161313, as no patches or vendor responses are available. Consider replacing the affected product with a secure alternative. Additionally, restrict or block remote access to the vulnerable endpoint /goform/formTaskEdit_ap at network perimeter devices or firewalls to prevent exploitation. Monitoring and intrusion detection for exploit attempts targeting this endpoint is also advised. [3]