Findings

CVE-2025-14191

A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114.

Published Dec 7, 2025 · updated Oct 14, 2026 · utt 512w firmware

A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formP2PLimitConfig. Such manipulation of the argument except leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 7, 2025 · NIST NVD

    Detected

    A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formP2PLimitConfig. Such manipulation of the argument except leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond

  2. Oct 14, 2026 · NIST NVD

    Updated

    A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formP2PLimitConfig. Such manipulation of the argument except leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond

Affected

  • cpe utt/512w firmwareversion unspecified

Sources

  • CVE.orgCVE-2025-14191

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2025-14191

    30-day exploitation probability 0.8%

    first.org
  • NIST NVDCVE-2025-14191

    A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formP2PLimitConfig. Such manipulation of the argument except leads to buffer overflow. It is possible to launch the attack remotely. The exploit has

    nvd.nist.gov

References