UTT 进取 520W 1.7.7-180627 /goform/formTaskEdit strcpy selDateType ବଫର୍ ଓଭରଫ୍ଲୋ
Rakkoon nageenyaa kan ଜଟିଳ jedhamuun beekamu UTT 进取 520W 1.7.7-180627 keessatti argameera. Miidhamni argame is hojii strcpy faayilii /goform/formTaskEdit keessa. Wanti jijjiirame irratti selDateType gara ବଫର୍ ଓଭରଫ୍ଲୋ geessa. Rakkoo ibsuuf CWE yoo fayyadamte gara CWE-120 si geessa. Odeeffannoon kun yeroo 01/04/2026 maxxanfameera. Odeeffannoon kun buufachuuf github.com irratti argama.
Dogoggorri kun CVE-2025-15461 jedhamee waamama. Weerara fageenya irraa jalqabuu ni danda'ama. Ibsa teeknikaa ni jira. Waan dabalataa ta’een, meeshaa balaa kana fayyadamuuf ni jira. Qorannoo miidhaa (exploit) uummataaf ifa taasifameera, kanaafis fayyadamuu ni danda'ama. Ammas, gatii exploit might be approx. USD $0-$5k yeroo ammaa irratti argamuu danda'a.
ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ ta’uu isaa ibsameera. Exploit github.com irraa buufachuun ni danda'ama. Akka 0-daytti, gatiin isaa daldala dhoksaa keessatti $0-$5k akka ta'e tilmaamameera.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
2 ଆଡାପ୍ଟେସନ୍ · 88 ପଏଣ୍ଟ
| ଫିଲ୍ଡ | ସୃଷ୍ଟି ହୋଇଛି 01/04/2026 07:06 PM | ଅଦ୍ୟତନ 1/1 01/05/2026 08:48 AM |
|---|---|---|
| software_vendor | UTT | UTT |
| software_name | 进取 520W | 进取 520W |
| software_version | 1.7.7-180627 | 1.7.7-180627 |
| software_file | /goform/formTaskEdit | /goform/formTaskEdit |
| software_function | strcpy | strcpy |
| software_argument | selDateType | selDateType |
| vulnerability_cwe | CWE-120 (ବଫର୍ ଓଭରଫ୍ଲୋ) | CWE-120 (ବଫର୍ ଓଭରଫ୍ଲୋ) |
| vulnerability_risk | 2 | 2 |
| cvss3_vuldb_av | N | N |
| cvss3_vuldb_ac | L | L |
| cvss3_vuldb_ui | N | N |
| cvss3_vuldb_s | U | U |
| cvss3_vuldb_c | H | H |
| cvss3_vuldb_i | H | H |
| cvss3_vuldb_a | H | H |
| cvss3_vuldb_e | P | P |
| cvss3_vuldb_rc | R | R |
| advisory_url | https://github.com/cymiao1978/cve/blob/main/new/24.md | https://github.com/cymiao1978/cve/blob/main/new/24.md |
| exploit_availability | 1 | 1 |
| exploit_publicity | 1 | 1 |
| exploit_url | https://github.com/cymiao1978/cve/blob/main/new/24.md#poc | https://github.com/cymiao1978/cve/blob/main/new/24.md#poc |
| source_cve | CVE-2025-15461 | CVE-2025-15461 |
| cna_responsible | VulDB | VulDB |
| response_summary | The vendor was contacted early about this disclosure but did not respond in any way. | The vendor was contacted early about this disclosure but did not respond in any way. |
| cvss2_vuldb_av | N | N |
| cvss2_vuldb_ac | L | L |
| cvss2_vuldb_ci | C | C |
| cvss2_vuldb_ii | C | C |
| cvss2_vuldb_ai | C | C |
| cvss2_vuldb_e | POC | POC |
| cvss2_vuldb_rc | UR | UR |
| cvss4_vuldb_av | N | N |
| cvss4_vuldb_ac | L | L |
| cvss4_vuldb_ui | N | N |
| cvss4_vuldb_vc | H | H |
| cvss4_vuldb_vi | H | H |
| cvss4_vuldb_va | H | H |
| cvss4_vuldb_e | P | P |
| cvss2_vuldb_au | S | S |
| cvss2_vuldb_rl | ND | ND |
| cvss3_vuldb_pr | L | L |
| cvss3_vuldb_rl | X | X |
| cvss4_vuldb_at | N | N |
| cvss4_vuldb_pr | L | L |
| cvss4_vuldb_sc | N | N |
| cvss4_vuldb_si | N | N |
| cvss4_vuldb_sa | N | N |
| cvss2_vuldb_basescore | 9.0 | 9.0 |
| cvss2_vuldb_tempscore | 7.7 | 7.7 |
| cvss3_vuldb_basescore | 8.8 | 8.8 |
| cvss3_vuldb_tempscore | 8.0 | 8.0 |
| cvss3_meta_basescore | 8.8 | 8.8 |
| cvss3_meta_tempscore | 8.0 | 8.4 |
| cvss4_vuldb_bscore | 8.7 | 8.7 |
| cvss4_vuldb_btscore | 7.4 | 7.4 |
| advisory_date | 1767481200 (01/04/2026) | 1767481200 (01/04/2026) |
| price_0day | $0-$5k | $0-$5k |
| cve_nvd_summary | A flaw has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/formTaskEdit. Executing a manipulation of the argument selDateType can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. | |
| cvss4_cna_av | N | |
| cvss4_cna_ac | L | |
| cvss4_cna_at | N | |
| cvss4_cna_pr | L | |
| cvss4_cna_ui | N | |
| cvss4_cna_vc | H | |
| cvss4_cna_vi | H | |
| cvss4_cna_va | H | |
| cvss4_cna_sc | N | |
| cvss4_cna_si | N | |
| cvss4_cna_sa | N | |
| cvss4_cna_bscore | 8.7 | |
| cvss3_cna_av | N | |
| cvss3_cna_ac | L | |
| cvss3_cna_pr | L | |
| cvss3_cna_ui | N | |
| cvss3_cna_s | U | |
| cvss3_cna_c | H | |
| cvss3_cna_i | H | |
| cvss3_cna_a | H | |
| cvss3_cna_basescore | 8.8 | |
| cvss2_cna_av | N | |
| cvss2_cna_ac | L | |
| cvss2_cna_au | S | |
| cvss2_cna_ci | C | |
| cvss2_cna_ii | C | |
| cvss2_cna_ai | C | |
| cvss2_cna_basescore | 9 |