UTT 进取 520W vulnerabilities

A vulnerability was detected in UTT 进取 520W version 1.7.7-180627. The issue affects the strcpy function in the file /goform/formPictureUrl, where manipulation of the importpictureurl argument leads to buffer overflow. The attack can be launched remotely, and the exploit is now public.

A security vulnerability has been detected in UTT 进取 520W version 1.7.7-180627. The issue affects the strcpy function in the file /goform/formConfigNoticeConfig, where the timestart argument can cause a buffer overflow. The attack can be initiated remotely, and the exploit has been publicly disclosed.

A vulnerability has been identified in UTT 进取 520W version 1.7.7-180627, involving the strcpy function in the /goform/APSecurity file. Manipulating the wepkey1 argument can lead to a buffer overflow. The attack can be performed remotely, and a public exploit increases the risk of exploitation.

A security flaw has been discovered in UTT 进取 520W version 1.7.7-180627, affecting the strcpy function in the /goform/ConfigWirelessBase file. Manipulation of the ssid argument results in a buffer overflow. The attack can be carried out remotely, and a public exploit increases the risk of exploitation.

A vulnerability was identified in UTT 进取 520W version 1.7.7-180627 in the strcpy function of the file /goform/formFireWall. Manipulation of the GroupName argument leads to a buffer overflow. The attack can be executed remotely, and the exploit is publicly available.

A vulnerability was found in UTT 进取 520W version 1.7.7-180627, involving a buffer overflow in the strcpy function in the file /goform/formConfigFastDirectionW. Manipulation of the ssid argument causes the overflow, which can be exploited remotely. The exploit has been publicly disclosed, and the vendor has not responded.

A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. The manipulation of the argument ssid leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in UTT 进取 512W up to version 3.1.7.7-171114, affecting the strcpy function in the file /goform/formNatStaticMap of the Endpoint component. Manipulating the NatBind argument can lead to a buffer overflow. The attack can be launched remotely, and the exploit has been publicly disclosed.

The UTT 进取 520W device version 1.7.7-180627 contains a buffer overflow vulnerability in the strcpy function in the file /goform/ConfigAdvideo. Manipulation of the argument timestart leads to buffer overflow. The attack can be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted but did not respond.

The UTT 进取 520W device version 1.7.7-180627 contains a buffer overflow vulnerability in the strcpy function in the file /goform/formTaskEdit. Manipulation of the argument selDateType leads to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted but did not respond.

The UTT 进取 520W device version 1.7.7-180627 contains a buffer overflow vulnerability in the strcpy function in the file /goform/formPptpClientConfig. Manipulation of the argument EncryptionMode results in buffer overflow. Remote exploitation is possible. The exploit is now public and may be used. The vendor was contacted but did not respond.

The UTT 进取 520W device version 1.7.7-180627 contains a buffer overflow vulnerability in the strcpy function in the file /goform/formUser. Manipulation of the argument passwd1 leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted but did not respond.

A vulnerability has been detected in UTT 进取 512W version 1.7.7-171114. The strcpy function in the file /goform/formConfigCliForEngineerOnly allows a buffer overflow via the addCommand argument. The attack can be launched remotely, and the exploit is publicly available.

A weakness has been identified in UTT 进取 512W version 1.7.7-171114. The strcpy function in the file /goform/formRemoteControl allows a buffer overflow via the Profile argument. The attack can be initiated remotely, and the exploit is publicly available.

A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/ConfigExceptMSN. Such manipulation of the argument remark leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/formPictureUrl. This manipulation of the argument importpictureurl causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the function strcpy of the file /goform/formConfigNoticeConfig. The manipulation of the argument timestart results in buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.

A vulnerability was found in UTT 进取 512W up to 1.7.7-171114 in the strcpy function of the /goform/APSecurity file. Manipulation of the wepkey1 argument leads to a buffer overflow. The attack can be carried out remotely, and the exploit has been publicly disclosed.

A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. It affects an unknown part of the file /goform/formWebAuthGlobalConfig. Manipulation of the argument hidcontact results in memory corruption. Remote exploitation is possible. The exploit has been made public and could be used. The vendor was contacted but did not respond.

A vulnerability was found in UTT 进取 518G up to V3v3.2.7-210919-161313. It affects some unknown processing of the file /goform/formTaskEdit_ap. Manipulation of the txtMin2 argument results in a buffer overflow. The attack may be performed remotely, and the exploit has been made public. The vendor was contacted but did not respond.

A vulnerability has been found in UTT 进取 518G up to V3v3.2.7-210919-161313. It affects the function sub_4247AC of the file /goform/formRemoteControl. Manipulation of the Profile argument leads to a buffer overflow. The attack can be carried out remotely, and the exploit has been disclosed. The vendor was contacted but did not respond.

A buffer overflow vulnerability exists in UTT 1250GW up to v2v3.2.2-200710 in the strcpy function of /goform/aspChangeChannel. Manipulation of the pvid argument allows remote attacks, and the exploit has been publicly disclosed.

A buffer overflow vulnerability has been determined in UTT 1250GW up to v2v3.2.2-200710, affecting the strcpy function in /goform/formUserStatusRemark. Manipulation of the Username argument causes buffer overflow. Remote exploitation is possible and the exploit has been publicly disclosed. The vendor was contacted but did not respond.