CVE-2025-10171

7.4 highEPSS 1.1%

A vulnerability was detected in UTT 1250GW up to 3.2.2-200710. This vulnerability affects the function sub_453DC of the file /goform/formConfigApConfTemp. Performing manipulation results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

CVSS 4.0

7.4 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWEs: CWE-119, CWE-120
Published: 2025-09-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

utt:1250gw_firmware

References

https://github.com/Aur0r3-zy/cve/blob/main/CVE.md
https://vuldb.com/?ctiid.323206
https://vuldb.com/?id.323206
https://vuldb.com/?submit.636789

Check your stack JSON