PT-2026-2037 · Unknown · Utt 进取 520W

Guotingting

·

Published

2026-01-01

·

Updated

2026-01-11

·

CVE-2026-0841

CVSS v2.0
9.0
VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions UTT 进取 520W version 1.7.7-180627 UTT 512W (affected versions not specified)
Description A flaw exists in the 
strcpy()
function within the software. This issue stems from insufficient input validation during buffer copying, specifically when handling the 
importpictureurl
argument. Successful exploitation allows a remote attacker to trigger a buffer overflow. The vulnerability is present in the file 
/goform/formPictureUrl
. The exploit is publicly available. Reports indicate offensive activities targeting this vulnerability.
API Endpoints /goform/formPictureUrl
Vulnerable Parameters or Variables 
importpictureurl
Recommendations UTT 进取 520W version 1.7.7-180627: At the moment, there is no information about a newer version that contains a fix for this vulnerability. UTT 512W: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120CWE-119

Related Identifiers

BDU:2026-00266
CVE-2026-0841

Affected Products

Utt 进取 520W