PT-2025-28137 · Unknown · Utt 进取 750W

Yuhongxiang · Published 2025-06-28 · Updated 2025-08-01 · CVE-2025-7116

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: UTT 进取 750W versions up to 3.2.2-191225

Description: A critical vulnerability has been found in UTT 进取 750W, affecting an unknown part of the file /goform/Fast wireless conf. The manipulation of the ssid argument leads to a buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Recommendations: For versions up to 3.2.2-191225, as a temporary workaround, consider restricting access to the /goform/Fast wireless conf endpoint to minimize the risk of exploitation. Avoid using the ssid argument in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

BDU:2026-00197

CVE-2025-7116

Affected Products

Utt 进取 750W

References · 13

• 🔥 https://github.com/d2pq/cve/blob/main/616/10.md · Exploit
• 🔥 https://github.com/d2pq/cve/blob/main/616/10.md#poc · Exploit
• https://bdu.fstec.ru/vul/2026-00197 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-7116 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7116 · Vendor Advisory
• https://twitter.com/DavidMarquet19/status/1951318135795011939 · Twitter Post
• https://vuldb.com/?ctiid.315027 · Note
• https://t.me/cvenotify/127798 · Telegram Post
• https://twitter.com/CVEnew/status/1942114876815532130 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1942156033540907234 · Twitter Post
• https://twitter.com/CveFindCom/status/1942118833914781762 · Twitter Post
• https://vuldb.com/?submit.605862 · Note
• https://vuldb.com/?id.315027 · Note