Cymiao

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A buffer overflow issue exists in the `strcpy` function within the `/goform/formP2PLimitConfig` file. Manipulating the `except` argument can trigger this issue. This allows for remote exploitation, and an exploit has been publicly released. The vendor was notified but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A flaw exists in UTT 进取 520W. A buffer overflow can occur in the `strcpy` function within the file `/goform/formIpGroupConfig` when the `groupName` argument is manipulated. This issue is remotely exploitable. The exploit has been publicly released. The vendor was notified but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A buffer overflow issue exists in the `strcpy` function within the `/goform/formPolicyRouteConf` file. Manipulation of the `GroupName` argument can trigger this issue. The attack can be carried out remotely. The exploit has been publicly disclosed. The vendor was notified but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A buffer overflow issue exists in the `strcpy` function within the `/goform/formSyslogConf` file. Manipulation of the `ServerIp` argument can trigger this issue, potentially allowing for remote attacks. The exploit for this issue is publicly available. The vendor was notified but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A security issue exists in UTT 进取 520W version 1.7.7-180627. The `strcpy` function within the file `/goform/formTimeGroupConfig` is susceptible to a buffer overflow when the `year1` argument is manipulated. This issue can be exploited remotely. The exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A buffer overflow issue exists in the `strcpy` function located in the file `/goform/ConfigExceptMSN`. This allows for remote attacks, and the exploit has been publicly disclosed. The vendor was notified but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A buffer overflow issue exists in the `strcpy` function within the file `/goform/ConfigExceptQQ` of UTT 进取 520W version 1.7.7-180627. A manipulation of the function can lead to a buffer overflow, potentially allowing for remote attacks. The vendor was contacted regarding this issue but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A buffer overflow issue exists in the `strcpy` function located in the `/goform/formWebAuthGlobalConfig` file. Manipulation of this function can lead to a buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available. The vendor was contacted regarding this issue but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A buffer overflow issue exists in the `strcpy` function within the `/goform/ConfigExceptAli` file of UTT 进取 520W version 1.7.7-180627. This allows for remote exploitation of the system. The vendor was notified of this issue but did not provide a response. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A security issue has been identified in the software. The `strcpy` function within the `/goform/formUser` file is susceptible to a buffer overflow when handling the `passwd1` argument. This manipulation can be exploited remotely. The exploit for this issue has been made public, and the vendor has not responded to notifications regarding this disclosure. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A flaw exists in UTT 进取 520W 1.7.7-180627 related to the `strcpy` function within the `/goform/ConfigAdvideo` file. Manipulation of the `timestart` argument can lead to a buffer overflow, potentially allowing for remote attacks. The exploit for this issue has been publicly disclosed. The vendor was notified but did not respond. **Recommendations** For UTT 进取 520W version 1.7.7-180627, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A flaw exists in UTT 进取 520W version 1.7.7-180627. The issue is a buffer overflow within the `strcpy` function located in the `/goform/formTaskEdit` file. Manipulation of the `selDateType` argument can trigger this overflow, and the attack can be executed remotely. An exploit for this issue has been published. The vendor was contacted regarding this disclosure but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A flaw exists in UTT 进取 520W 1.7.7-180627 that allows for a buffer overflow. The issue is located in the `strcpy` function within the file `/goform/formPptpClientConfig`. Manipulation of the `EncryptionMode` argument can trigger the overflow. Remote exploitation is possible. The exploit is publicly available. The vendor was informed of the issue but did not provide a response. **Recommendations** Versions prior to 1.7.7-180627 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 512W versions through 1.7.7-171114 **Description** A buffer overflow issue exists in UTT 进取 512W. The issue is related to the `strcpy` function within the `/goform/formConfigNoticeConfig` file. Manipulation of the `timestart` argument can trigger the overflow. The issue can be exploited remotely. The exploit has been made public. **Recommendations** Versions prior to 1.7.7-171114 are affected. As a temporary workaround, consider restricting access to the `/goform/formConfigNoticeConfig` file to minimize the risk of exploitation. Avoid using the `timestart` argument in the `/goform/formConfigNoticeConfig` API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 512W versions through 1.7.7-171114 **Description** A flaw exists in UTT 进取 512W that allows for remote buffer overflow. The issue is related to the `strcpy` function within the `/goform/ConfigExceptMSN` file. Manipulation of the `remark` argument can trigger the overflow. A public exploit is available. **Recommendations** Versions prior to 1.7.7-171114 should be updated. As a temporary workaround, consider restricting access to the `/goform/ConfigExceptMSN` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 512W versions through 1.7.7-171114 **Description** A buffer overflow issue exists in UTT 进取 512W. The issue is related to the `strcpy` function within the /goform/APSecurity file. Manipulation of the `wepkey1` argument can trigger the overflow. The issue is remotely exploitable and the exploit has been publicly disclosed. **Recommendations** Versions prior to 1.7.7-171114 are vulnerable. As a temporary workaround, consider restricting access to the /goform/APSecurity file to minimize the risk of exploitation. Avoid using the `wepkey1` argument in the /goform/APSecurity endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 512W versions prior to 1.7.7-171114 **Description** A flaw exists in UTT 进取 512W. The `strcpy` function within the `/goform/formPictureUrl` file is susceptible to a buffer overflow when handling the `importpictureurl` argument. This allows for remote exploitation of the system. The exploit for this issue has been publicly disclosed. **Recommendations** Versions prior to 1.7.7-171114 should be updated. As a temporary workaround, consider restricting access to the `/goform/formPictureUrl` file.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A flaw exists in the strcpy function within the /goform/formArpBindConfig file. Manipulation of the `pools` argument can lead to a buffer overflow, potentially allowing for remote attacks. The exploit for this issue has been published. The vendor was notified but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A buffer overflow issue exists in the `strcpy` function within the `/goform/websHostFilter` file. Manipulation of the `addHostFilter` argument can trigger this issue, allowing for remote exploitation. The exploit is publicly available. The vendor was notified but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 520W version 1.7.7-180627 **Description** A security issue exists in UTT 进取 520W version 1.7.7-180627 related to a buffer overflow. The `strcpy` function within the file `/goform/formConfigDnsFilterGlobal` is affected. Manipulation of the `timeRangeName` argument can lead to this overflow. The exploit has been publicly disclosed. The vendor was notified but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.