PT-2025-36969 · Unknown · Utt 1200Gw

Qmssdxn · CVE-2025-10170 · Published 2025-09-09 · Updated 2025-09-09

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: UTT 1200GW versions prior to 3.0.0-170831

Description: A security issue has been identified in UTT 1200GW. Manipulation of the loadBalanceNameOld argument in the sub 4B48F8 function within the /goform/formApLbConfig file can lead to a buffer overflow. This issue may be exploited remotely. The exploit has been publicly disclosed.

Recommendations: Versions prior to 3.0.0-170831: Update to version 3.0.0-170831 or later. As a temporary workaround, restrict access to the /goform/formApLbConfig file to minimize the risk of exploitation. Avoid using the loadBalanceNameOld parameter in the affected function sub 4B48F8 until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2025-10170

Affected Products

Utt 1200Gw

References · 7

• 🔥 https://github.com/lin-3-start/lin-cve/blob/main/UTT%201200GW-2/UTT%201200GW-2.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-10170 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10170 · Security Note
• https://twitter.com/CVEnew/status/1965557700713992412 · Twitter Post
• https://vuldb.com/?id.323205 · Note
• https://vuldb.com/?submit.636697 · Note
• https://vuldb.com/?ctiid.323205 · Note