PT-2026-1215

CVE-2025-15460

·

Published

2025-12-29

·

Updated

2026-01-10

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions UTT 进取 520W version 1.7.7-180627
Description A flaw exists in UTT 进取 520W 1.7.7-180627 that allows for a buffer overflow. The issue is located in the strcpy function within the file /goform/formPptpClientConfig. Manipulation of the EncryptionMode argument can trigger the overflow. Remote exploitation is possible. The exploit is publicly available. The vendor was informed of the issue but did not provide a response.
Recommendations Versions prior to 1.7.7-180627 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾