CVE-2025-15462
Remote Buffer Overflow in UTT 进取 520W strcpy Function
Publication date: 2026-01-05
Last updated on: 2026-01-05
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| unknown_vendor | utt_进取_520w | 1.7.7-180627 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a buffer overflow in the UTT 进取 520W device (version 1.7.7-180627) caused by improper handling of the 'timestart' argument in the strcpy function within the /goform/ConfigAdvideo file. The input is copied without verifying its size against the output buffer, leading to a classic buffer overflow condition. This flaw can be exploited remotely and has a publicly available proof-of-concept exploit. [2]
How can this vulnerability impact me? :
The vulnerability can compromise the confidentiality, integrity, and availability of the affected device. Since it is remotely exploitable, an attacker can execute arbitrary code or cause denial of service, impacting the device's security and availability. There are currently no known mitigations or patches, so the affected product should be replaced to avoid risk. [2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring network traffic for requests targeting the /goform/ConfigAdvideo endpoint with the timestart argument. Since the exploit is publicly available, you can use proof-of-concept scripts from GitHub to test if your device is vulnerable. Specific commands are not provided in the resources, but you may use tools like curl or wget to send crafted HTTP requests to the device's /goform/ConfigAdvideo endpoint with oversized timestart parameters to check for abnormal behavior or crashes. [2]
What immediate steps should I take to mitigate this vulnerability?
No official patch or mitigation has been released by the vendor. Immediate steps include replacing the affected UTT 进取 520W device with an alternative product. Additionally, restrict network access to the device to prevent remote exploitation, such as isolating the device from untrusted networks or applying firewall rules to block access to the vulnerable endpoint. [2]