PT-2025-38645 · Unknown · Utt Hiper 840G

Cymiao · Published 2025-09-20 · Updated 2025-09-21 · CVE-2025-10756

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UTT HiPER 840G versions up to 3.1.1-190328

Description A security flaw exists in UTT HiPER 840G up to version 3.1.1-190328. The issue involves a buffer overflow in an unknown function within the /goform/getOneApConfTempEntry file. The tempName argument can be manipulated to trigger the overflow, allowing for remote exploitation. The exploit has been publicly released. The vendor was notified but did not respond.

Recommendations Versions prior to 3.1.1-190328 should be updated. As a temporary workaround, consider restricting access to the /goform/getOneApConfTempEntry file to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

BDU:2026-02108

CVE-2025-10756

Affected Products

Utt Hiper 840G

References · 11

• 🔥 https://github.com/cymiao1978/cve/blob/main/5.md#poc · Exploit
• 🔥 https://github.com/cymiao1978/cve/blob/main/5.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10756 · Security Note
• https://bdu.fstec.ru/vul/2026-02108 · Security Note
• https://osv.dev/vulnerability/CVE-2025-10756 · Vendor Advisory
• https://t.me/CVEtracker/32998 · Telegram Post
• https://twitter.com/CveFindCom/status/1969531845671891298 · Twitter Post
• https://vuldb.com/?id.325111 · Note
• https://vuldb.com/?submit.645678 · Note
• https://vuldb.com/?ctiid.325111 · Note
• https://twitter.com/CVEnew/status/1969540472969576491 · Twitter Post