CVE-2025-14535
Published: 11 December 2025
Description
A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. The manipulation of the argument ssid leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly…
more
available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Mitigating Controls (NIST 800-53 r5)AI
Requires validation and sanitization of the 'ssid' argument to /goform/formConfigFastDirectionW to directly prevent the buffer overflow triggered by strcpy.
Mandates monitoring for vulnerabilities like CVE-2025-14535, scanning affected UTT devices, and remediating flaws to eliminate the buffer overflow risk.
Deploys memory protection mechanisms such as address space layout randomization and stack canaries to mitigate remote exploitation of the buffer overflow for arbitrary code execution.
Security SummaryAI
CVE-2025-14535 is a buffer overflow vulnerability affecting the UTT 进取 512W device running firmware versions up to 3.1.7.7-171114. The issue resides in the strcpy function within the /goform/formConfigFastDirectionW file, where manipulation of the 'ssid' argument triggers the overflow. This flaw, classified under CWE-119 and CWE-120, carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating critical severity due to its potential for complete system compromise.
The vulnerability can be exploited remotely by unauthenticated attackers with network access, requiring low complexity and no user interaction. Successful exploitation allows arbitrary code execution, potentially granting attackers high-impact control over confidentiality, integrity, and availability of the affected device, such as executing malicious code or disrupting network operations.
Advisories from VulDB and a GitHub issue tracker detail the vulnerability but note no vendor response despite early contact, implying no official patches or mitigations are available. Security practitioners should isolate affected devices, monitor for exploitation attempts targeting the /goform/formConfigFastDirectionW endpoint, and consider firmware upgrades if released.
A publicly available exploit exists, increasing the risk of active attacks against unpatched UTT 进取 512W deployments.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in publicly accessible web endpoint (/goform/formConfigFastDirectionW) on network device enables unauthenticated remote arbitrary code execution.