PT-2025-38646 · Unknown · Utt 1200Gw

Cymiao · Published 2025-09-20 · Updated 2025-09-26 · CVE-2025-10757

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UTT 1200GW versions prior to 3.0.0-170831

Description A buffer overflow weakness exists in UTT 1200GW. The issue is located in an unknown function within the /goform/formConfigDnsFilterGlobal file. Manipulation of the GroupName argument triggers the overflow. This can be exploited remotely. The exploit is publicly available, and the vendor has not responded to reports about this issue.

Recommendations Update UTT 1200GW to a version prior to 3.0.0-170831. As a temporary workaround, restrict access to the /goform/formConfigDnsFilterGlobal file. Avoid using the GroupName argument in the affected file until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

BDU:2026-02109

CVE-2025-10757

Affected Products

Utt 1200Gw

References · 11

• 🔥 https://github.com/cymiao1978/cve/blob/main/6.md#poc · Exploit
• 🔥 https://github.com/cymiao1978/cve/blob/main/6.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-10757 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10757 · Security Note
• https://bdu.fstec.ru/vul/2026-02109 · Security Note
• https://vuldb.com/?ctiid.325112 · Note
• https://vuldb.com/?submit.645681 · Note
• https://t.me/CVEtracker/32999 · Telegram Post
• https://twitter.com/CveFindCom/status/1969546927906705585 · Twitter Post
• https://vuldb.com/?id.325112 · Note
• https://twitter.com/cracbot/status/1971530226141462921 · Twitter Post