PT-2026-21023 · Unknown · Utt Hiper 520

Ruler-Chovy · Publicado 2026-02-20 · Atualizado 2026-02-23 · CVE-2026-2846

Positive Technologies (AI Summary)

CVSS v2.0

8.3

Alta

Vetor base

AV:N/AC:L/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UTT HiPER 520 version 1.7.7-160105

Description A security issue exists in UTT HiPER 520. The sub 44D264 function within the /goform/formPdbUpConfig file of the Web Management Interface is susceptible to operating system command injection. This occurs through manipulation of the policyNames argument, and the attack can be initiated remotely. The exploit for this issue has been publicly disclosed.

Recommendations Apply a fix to the sub 44D264 function in the /goform/formPdbUpConfig file to prevent manipulation of the policyNames argument.

Exploit

Correção

Command Injection

OS Command Injection

Enumeração de Fraquezas

CWE-77

CWE-78

Identificadores relacionados

CVE-2026-2846

Produtos afetados

Utt Hiper 520

Referências · 8

• 🔥 https://github.com/cha0yang1/UTT520CVE/blob/main/UTTRCE1.md · Exploit
• https://vuldb.com/?id.347082 · Nota
• https://vuldb.com/?submit.753964 · Nota
• https://vuldb.com/?ctiid.347082 · Nota
• https://osv.dev/vulnerability/CVE-2026-2846 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2025809074919755892 · Publicação no Twitter
• https://t.me/CVEtracker/45287 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-2846 · Nota de Segurança