PT-2025-27020 · Utt · Utt Hiper 840G
Yuhongxiang
·
Published
2025-06-26
·
Updated
2026-01-08
·
CVE-2025-6733
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
UTT HiPER 840G versions up to 3.1.1-190328
Description:
A critical issue affects the function
sub 416928 of the file /goform/formConfigDnsFilterGlobal in the component API. The manipulation of the argument GroupName leads to buffer overflow. This issue can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond.Recommendations:
For UTT HiPER 840G versions up to 3.1.1-190328, as a temporary workaround, consider disabling the
sub 416928 function until a patch is available. Restrict access to the /goform/formConfigDnsFilterGlobal API endpoint to minimize the risk of exploitation. Avoid using the GroupName argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Utt Hiper 840G