PT-2025-27021 · Utt · Utt Hiper 840G
Yuhongxiang
·
Published
2025-06-26
·
Updated
2026-01-08
·
CVE-2025-6734
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
UTT HiPER 840G versions up to 3.1.1-190328
Description:
A critical issue affects the function
sub 484E40 of the file /goform/formP2PLimitConfig of the component API. The manipulation of the argument except leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Recommendations:
For UTT HiPER 840G versions up to 3.1.1-190328, as a temporary workaround, consider disabling the
sub 484E40 function until a patch is available. Restrict access to the /goform/formP2PLimitConfig API endpoint to minimize the risk of exploitation. Avoid using the argument except in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Utt Hiper 840G