CVE-2026-31065

Published: Apr 6, 2026Modified: Jun 17, 2026

4.5

Vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 0.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Affected (1)

Products: Utt: 520w Firmware

Utt

1 product

520w Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Utt 520w Firmware	Version 1.7.7-180627

Running on/with	Platform Versions
Utt 520w	Version 3.0

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (1)

https://github.com/zxq0408/Vul202601/blob/main/8.md

Source: cve@mitre.org

ExploitThird Party Advisory

Timeline

No history available yet.