VULNERABILITY INTELLIGENCE

CVE-2025-15431

CVSS score8.8 HIGH
EPSS probability0.80%
CISA KEVNot currently listed
Published2026-01-02
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A flaw has been found in UTT 进取 512W 1.7.7-171114. This affects the function strcpy of the file /goform/formFtpServerDirConfig. Executing a manipulation of the argument filename can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness classification

  • cna@vuldb.com: CWE-119

Primary references