UTT 520w Firmware 1.7.7-180627

A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.

UTT 进取 520W formArpBindConfig strcpy buffer overflow

UTT 进取 520W formTimeGroupConfig strcpy buffer overflow

UTT 进取 520W formSyslogConf strcpy buffer overflow

UTT 进取 520W formIpGroupConfig strcpy buffer overflow

UTT 进取 520W formPolicyRouteConf strcpy buffer overflow

UTT 进取 520W formP2PLimitConfig strcpy buffer overflow

UTT 进取 520W websHostFilter strcpy buffer overflow

A remote command execution (RCE) vulnerability in the /goform/formReleaseConnect component of UTT Aggressive 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.

UTT 进取 520W formConfigDnsFilterGlobal strcpy buffer overflow

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.