Cymiao1978

A buffer overflow issue exists in UTT 进取 518G. The flaw is located in the processing of the `/goform/formTaskEdit ap` API endpoint, specifically when handling the `txtMin2` argument. This allows for remote exploitation, potentially leading to arbitrary code execution or system crashes. The vendor was contacted regarding this issue but did not respond. An exploit for this issue has been publicly released.

A buffer overflow issue exists in UTT 进取 518G up to version V3v3.2.7-210919-161313. The issue is located in the `sub 4247AC` function within the `/goform/formRemoteControl` file. The `Profile` argument can be manipulated to trigger a buffer overflow, allowing for remote exploitation. The exploit for this issue has been publicly disclosed. The vendor was notified but did not respond.