PT-2025-28138 · Utt · Utt Hiper 840G
Yuhongxiang
·
Published
2025-06-28
·
Updated
2025-08-01
·
CVE-2025-7117
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
UTT HiPER 840G versions up to 3.1.1-190328
Description:
A critical vulnerability was found in the UTT HiPER 840G, affecting unknown code of the file /goform/websWhiteList. The manipulation of the
addHostFilter argument leads to a buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Recommendations:
For UTT HiPER 840G versions up to 3.1.1-190328, as a temporary workaround, consider disabling the
addHostFilter argument in the /goform/websWhiteList endpoint until a patch is available. Restrict access to the /goform/websWhiteList endpoint to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Utt Hiper 840G