Executive Summary

CVE-2026-2182 is a critical command injection vulnerability found in the UTT 进取 521G device, version 3.1.1-190816. The flaw exists in the function doSystem within the file /goform/setSysAdm, specifically due to improper handling of the argument passwd1.

Because the passwd1 parameter is not properly sanitized, an attacker can inject arbitrary commands that get executed by the system. This allows remote attackers, who have an enhanced level of authentication, to execute commands with root privileges on the device.

The vulnerability is classified under CWE-77, meaning it involves constructing commands using externally influenced input without neutralizing special characters, enabling modification of intended command execution.

Useful 0 Not Useful 0

Impact Analysis

Exploiting this vulnerability allows an attacker to execute arbitrary system commands with root privileges on the affected device, leading to full system compromise.

This impacts the confidentiality, integrity, and availability of the system, as attackers can manipulate system functions, access sensitive data, disrupt services, or take control of the device remotely.

Since the exploit is publicly available and the attack can be launched remotely, the risk of exploitation is significant, especially if the device is exposed to untrusted networks.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

[{'type': 'paragraph', 'content': 'This vulnerability can be detected by testing the /goform/setSysAdm endpoint of the UTT 进取 521G device for command injection via the passwd1 parameter.'}, {'type': 'paragraph', 'content': 'A common approach is to send crafted HTTP requests to the vulnerable endpoint with payloads designed to execute commands, such as injecting shell commands through the passwd1 argument.'}, {'type': 'list_item', 'content': 'Use curl or similar tools to send a request like: curl -X POST http://<target-ip>/goform/setSysAdm -d "passwd1=;id;"'}, {'type': 'list_item', 'content': 'Observe the response or behavior of the device to check if the injected command (e.g., id) was executed.'}, {'type': 'paragraph', 'content': 'Since a public proof-of-concept exploit is available on GitHub, reviewing that resource can provide specific commands and payloads for detection.'}] [1, 2, 3]

Useful 0 Not Useful 0

Mitigation Strategies

[{'type': 'paragraph', 'content': 'No known countermeasures or mitigations have been identified for this vulnerability.'}, {'type': 'paragraph', 'content': 'The recommended immediate step is to replace the affected UTT 进取 521G device or firmware version 3.1.1-190816 with an alternative product or updated firmware that is not vulnerable.'}, {'type': 'paragraph', 'content': "Additionally, restrict remote access to the device's management interface to trusted networks and users with strong authentication to reduce the risk of exploitation."}] [2]

Useful 0 Not Useful 0