PT-2025-41741 · Unknown · Utt Hiper 2620G

Ashin9 + 1 · Published 2025-10-13 · Updated 2026-02-10 · CVE-2025-11653

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UTT HiPER 2620G versions through 3.1.4

Description A flaw exists in UTT HiPER 2620G up to version 3.1.4. The strcpy function within the /goform/fNTP file is susceptible to a buffer overflow when the NTPServerIP argument is manipulated. This issue can be exploited remotely. The exploit for this issue has been publicly disclosed. The vendor was informed about the disclosure but did not respond.

Recommendations Versions prior to 3.1.4 should be updated. As a temporary workaround, consider restricting access to the /goform/fNTP file to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2025-11653

Affected Products

Utt Hiper 2620G

References · 13

• 🔥 https://github.com/ashin9/CVE/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11653 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11653 · Vendor Advisory
• https://vuldb.com/?ctiid.328070 · Note
• https://t.me/cveNotify/138403 · Telegram Post
• https://vuldb.com/?submit.665712 · Note
• https://twitter.com/CVEnew/status/1977567308303220984 · Twitter Post
• https://twitter.com/CveFindCom/status/1977542265900794058 · Twitter Post
• https://t.me/cveNotify/151602 · Telegram Post
• https://vuldb.com/?id.328070 · Note
• https://twitter.com/cracbot/status/1979502761617023218 · Twitter Post
• https://twitter.com/cracbot/status/1979140379304739230 · Twitter Post
• https://t.me/CVEtracker/34732 · Telegram Post