Denial of Service in UTT nv518G Router Firmware

Executive Summary

This vulnerability exists in the UTT nv518G nv518GV3v3.2.7-210919-161313 device. It allows a remote attacker to cause a denial of service (DoS) by exploiting the gohead/sub_44af70 component.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by testing the affected endpoint `/gohead/sub_44af70` for command injection via the `v3` parameter.

A practical detection method is to send a crafted POST request with shell metacharacters in the `v3` parameter and observe if arbitrary commands are executed.

• Use a command like: curl -X POST -d "wanIndex=1&staticGateway=127.0.0.1; id > /tmp/poc.txt" http://<target-ip>/gohead/sub_44af70

If the file `/tmp/poc.txt` is created on the device containing the output of the `id` command, it confirms the vulnerability.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is that a remote attacker can cause a denial of service, which may result in the affected device becoming unavailable or unresponsive.

Useful 0 Not Useful 0

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate the CVE-2026-52197 vulnerability, immediate steps should focus on preventing exploitation of the vulnerable component `/gohead/sub_44af70` in the affected firmware version.

• Avoid exposing the vulnerable service or endpoint to untrusted networks or the internet.
• Restrict access to the device or the `/gohead/sub_44af70` endpoint by implementing network-level controls such as firewalls or access control lists.
• Monitor network traffic and logs for suspicious POST requests containing shell metacharacters in the `v3` parameter.
• If possible, disable or restrict the functionality of the vulnerable component until a patch or firmware update is available.

Applying a firmware update or patch from the vendor that addresses this vulnerability is the recommended long-term solution once available.

Useful 0 Not Useful 0