HIGH
UTT HiPER 840G aspApBasicConfigUrcp buffer overflow
Published Jul 14, 2025
8.7
HIGHCVSS 4.0
EPSS 0.93%
Description
A vulnerability classified as critical has been found in UTT HiPER 840G up to 3.1.1-190328. This affects an unknown part of the file /goform/aspApBasicConfigUrcp. The manipulation of the argument Username leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
-
- Version 3.1.1-190328StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| UTT | HiPER 840G | n/a |
|
AND
- ≤ 3.1.1-190328
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-21305 Advisory
- https://github.com/d2pq/cve/blob/main/616/6.md relatedExploitThird Party Advisory
- https://github.com/d2pq/cve/blob/main/616/6.md#poc exploitThird Party Advisory
- https://vuldb.com/?ctiid.316269 signaturepermissions-requiredPermissions RequiredVDB Entry
- https://vuldb.com/?id.316269 vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- https://vuldb.com/?submit.607747 third-party-advisoryThird Party AdvisoryVDB Entry
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-21305 | Advisory | |
| https://github.com/d2pq/cve/blob/main/616/6.md | relatedExploitThird Party Advisory | |
| https://github.com/d2pq/cve/blob/main/616/6.md#poc | exploitThird Party Advisory | |
| https://vuldb.com/?ctiid.316269 | signaturepermissions-requiredPermissions RequiredVDB Entry | |
| https://vuldb.com/?id.316269 | vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.607747 | third-party-advisoryThird Party AdvisoryVDB Entry |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Jul 14, 2025
Updated Jul 14, 2025
Reserved Jul 13, 2025
Link CVE-2025-7571
CISA Vulnrichment
Updated Jul 14, 2025
ENISA EUVD
EUVD-2025-21305 Assigner VulDB
Published Jul 14, 2025
Updated Jul 14, 2025
Exploited since n/a
Link EUVD-2025-21305