CVE-2025-14191

A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formP2PLimitConfig. Such manipulation of the argument except leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0

7.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

CVSS 3.1

9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-25)

CWEs

CWE-120, CWE-119

Published

2025-12-07

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

Affected

• utt:512w_firmware

References

• https://github.com/DavCloudz/cve/blob/main/UTT/512W/UTT%20512W%20Buffer%20Overflow%20Vulnerability.md
• https://github.com/DavCloudz/cve/blob/main/UTT/512W/UTT%20512W%20Buffer%20Overflow%20Vulnerability.md#poc
• https://vuldb.com/?ctiid.334611
• https://vuldb.com/?id.334611
• https://vuldb.com/?submit.699220

Check your stackJSON