UTT vulnerabilities
We track 106 vulnerabilities in UTT products across 27 products. 106 are rated high or critical, and none are known to be exploited. The most recent was published on August 24, 2026.
Latest UTT vulnerabilities
- 7.2 High severity
HiPER 520: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub_44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. The manipulation of the argument Isp_Name results in os command injection. The att
- 7.2 High severity
HiPER 520: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in UTT HiPER 520 1.7.7-160105. This impacts the function sub_44D264 of the file /goform/formPdbUpConfig of the component Web Management Interface. The manipulation of the argument policyNames leads to os command injec
- 9.8 Critical severity
810 Firmware: Initialization of a Resource with an Insecure Default
UTT HiPER 810 / nv810v4 router firmware v1.5.0-140603 was discovered to contain insecure default credentials for the telnet service, possibly allowing a remote attacker to gain root access via a crafted script.
- 7.2 High severity
进取 521G: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was determined in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub_446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the argument policyNames can lead to os command injection. It is possible to launch the
- 7.2 High severity
进取 521G: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in UTT 进取 521G 3.1.1-190816. Affected by this issue is the function doSystem of the file /goform/setSysAdm. Executing a manipulation of the argument passwd1 can lead to command injection. The attack may be launched remotely. The
- 8.8 High severity
HiPER 810: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_43F020 of the file /goform/formPdbUpConfig. Performing a manipulation of the argument policyNames results in command injection. It is possible to initiate the
- 7.2 High severity
HiPER 810: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_4407D4 of the file /goform/formReleaseConnect of the component rehttpd. Executing a manipulation of the argument Isp_Name can lead to command injection. The
- 8.8 High severity
HiPER 810G: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in UTT HiPER 810G up to 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formFireWall of the component Management Interface. The manipulation of the argument GroupName results in buffer overfl
- 7.2 High severity
HiPER 810: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in UTT HiPER 810 1.7.4-141218. This issue affects the function setSysAdm of the file /goform/formUser. The manipulation of the argument passwd1 leads to command injection. Remote exploitation of the attack is possible. The exploi
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formP2PLimitConfig. Performing a manipulation of the argument except results in buffer overflow. The attack is possible to be carried out rem
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /goform/formPolicyRouteConf. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be executed remotely. The expl
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/formSyslogConf. The manipulation of the argument ServerIp results in buffer overflow. The attack may be launched remotely. The exploit is now p
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/formTimeGroupConfig. The manipulation of the argument year1 leads to buffer overflow. The attack may be initiated remotel
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formIpGroupConfig. Executing a manipulation of the argument groupName can lead to buffer overflow. The attack can be launched remotely. The exploit
- 9.8 Critical severity
HiPER 810: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in UTT HiPER 810 1.7.4-141218. The impacted element is the function strcpy of the file /goform/setSysAdm. This manipulation of the argument passwd1 causes buffer overflow. Remote exploitation of the attack is possible. The exploit has bee
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/ConfigExceptAli. The manipulation results in buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and c
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/ConfigExceptMSN. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disc
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/ConfigExceptQQ. Executing a manipulation can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be use
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formWebAuthGlobalConfig. Performing a manipulation results in buffer overflow. The attack is possible to be carried out remotely. The ex
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formPictureUrl. The manipulation of the argument importpictureurl results in buffer overflow. It is possible to launch the attack remote
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this vulnerability is the function strcpy of the file /goform/formConfigNoticeConfig. The manipulation of the argument timestart leads to buffer overflow. It is possible to ini
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in UTT 进取 520W 1.7.7-180627. Affected is the function strcpy of the file /goform/APSecurity. Executing a manipulation of the argument wepkey1 can lead to buffer overflow. The attack may be performed from remote. The exploit has b
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in UTT 进取 520W 1.7.7-180627. This impacts the function strcpy of the file /goform/ConfigWirelessBase. Performing a manipulation of the argument ssid results in buffer overflow. The attack is possible to be carried out remote
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formFireWall. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be executed remotely. The exploit is publicly av
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formConfigFastDirectionW. This manipulation of the argument ssid causes buffer overflow. Remote exploitation of the attack is possible.
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the argument timestart leads to buffer overflow. The attack is possible to be carried out remotely. The ex
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/formTaskEdit. Executing a manipulation of the argument selDateType can lead to buffer overflow. The attack can be executed remotely. The explo
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formPptpClientConfig. Performing a manipulation of the argument EncryptionMode results in buffer overflow. Remote exploitation of the attack is possi
- 8.8 High severity
进取 520W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formUser. Such manipulation of the argument passwd1 leads to buffer overflow. The attack may be launched remotely. The exp
- 8.8 High severity
进取 512W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in UTT 进取 512W 1.7.7-171114. This affects the function strcpy of the file /goform/formFtpServerDirConfig. Executing a manipulation of the argument filename can lead to buffer overflow. The attack can be launched remotely. The exploit has
- 8.8 High severity
进取 512W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in UTT 进取 512W 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formFtpServerShareDirSelcet. Performing a manipulation of the argument oldfilename results in buffer overflow. The attack can be initiat
- 8.8 High severity
进取 512W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in UTT 进取 512W 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formConfigCliForEngineerOnly. Such manipulation of the argument addCommand leads to buffer overflow. It is possibl
- 8.8 High severity
进取 512W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in UTT 进取 512W 1.7.7-171114. Affected is the function strcpy of the file /goform/formRemoteControl. This manipulation of the argument Profile causes buffer overflow. It is possible to initiate the attack remotely. The exploit has
- 9.8 Critical severity
进取 512W: Buffer Copy without Checking Size of Input
A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/ConfigExceptMSN. Such manipulation of the argument remark leads to buffer overflow. It is possible to launch the attack remotely. The exploit
- 9.8 Critical severity
进取 512W: Buffer Copy without Checking Size of Input
A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/formPictureUrl. This manipulation of the argument importpictureurl causes buffer overflow. It is possible to initiate the attack remote
- 9.8 Critical severity
进取 512W: Buffer Copy without Checking Size of Input
A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the function strcpy of the file /goform/formConfigNoticeConfig. The manipulation of the argument timestart results in buffer overflow. The attack may be performed from remo
- 9.8 Critical severity
进取 512W: Buffer Copy without Checking Size of Input
A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. This affects the function strcpy of the file /goform/APSecurity. The manipulation of the argument wepkey1 leads to buffer overflow. The attack is possible to be carried out remotely. The exploit
- 8.8 High severity
进取 512W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This affects an unknown part of the file /goform/formWebAuthGlobalConfig. Performing manipulation of the argument hidcontact results in memory corruption. Remote exploitation of the attack is possibl
- 9.8 Critical severity
进取 512W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. The manipulation of the argument ssid leads to buffer overflow. The attack may be initiated remotely. The exploit
- 9.8 Critical severity
进取 512W: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in UTT 进取 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform/formNatStaticMap of the component Endpoint. Executing manipulation of the argument NatBind can lead to buffer overflow. The attack can be l