PT-2025-38646 · Unknown · Utt 1200Gw

Cymiao · CVE-2025-10757 · Publicado 2025-09-20 · Atualizado 2025-09-26

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UTT 1200GW versions prior to 3.0.0-170831

Description A buffer overflow weakness exists in UTT 1200GW. The issue is located in an unknown function within the /goform/formConfigDnsFilterGlobal file. Manipulation of the GroupName argument triggers the overflow. This can be exploited remotely. The exploit is publicly available, and the vendor has not responded to reports about this issue.

Recommendations Update UTT 1200GW to a version prior to 3.0.0-170831. As a temporary workaround, restrict access to the /goform/formConfigDnsFilterGlobal file. Avoid using the GroupName argument in the affected file until the issue is resolved.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

CWE-120

Identificadores relacionados

BDU:2026-02109

CVE-2025-10757

Produtos afetados

Utt 1200Gw

Referências · 11

• 🔥 https://github.com/cymiao1978/cve/blob/main/6.md#poc · Exploit
• 🔥 https://github.com/cymiao1978/cve/blob/main/6.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-10757 · Aviso do Fabricante
• https://vuldb.com/?ctiid.325112 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-10757 · Nota de Segurança
• https://vuldb.com/?submit.645681 · Nota
• https://t.me/CVEtracker/32999 · Publicação no Telegram
• https://twitter.com/CveFindCom/status/1969546927906705585 · Publicação no Twitter
• https://vuldb.com/?id.325112 · Nota
• https://bdu.fstec.ru/vul/2026-02109 · Nota de Segurança
• https://twitter.com/cracbot/status/1971530226141462921 · Publicação no Twitter