PT-2026-7014 · Unknown · Utt 进取 521G

Cha0Yang · Publicado 2026-02-08 · Atualizado 2026-02-08 · CVE-2026-2182

Positive Technologies (AI Summary)

CVSS v2.0

8.3

Alta

Vetor base

AV:N/AC:L/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UTT 进取 521G version 3.1.1-190816

Description A flaw exists in the doSystem function within the /goform/setSysAdm file. Manipulation of the passwd1 argument can result in command injection. This issue may be exploited remotely. The exploit is publicly available.

Recommendations Apply updates to address the vulnerability in the doSystem function. As a temporary workaround, restrict access to the /goform/setSysAdm file. Avoid using the passwd1 argument in the affected function until the issue is resolved.

Exploit

Correção

DoS

Special Elements Injection

Command Injection

Enumeração de Fraquezas

CWE-74

CWE-77

Identificadores relacionados

CVE-2026-2182

Produtos afetados

Utt 进取 521G

Referências · 10

• 🔥 https://github.com/cha0yang1/UTT521G/blob/main/RCE1.md#poc · Exploit
• 🔥 https://github.com/cha0yang1/UTT521G/blob/main/RCE1.md · Exploit
• https://twitter.com/CVEnew/status/2020601651959136370 · Publicação no Twitter
• https://vuldb.com/?id.344885 · Nota
• https://osv.dev/vulnerability/CVE-2026-2182 · Aviso do Fabricante
• https://vuldb.com/?ctiid.344885 · Nota
• https://t.me/cveNotify/151326 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-2182 · Nota de Segurança
• https://t.me/CVEtracker/44130 · Publicação no Telegram
• https://vuldb.com/?submit.749712 · Nota