Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

UTT — Vulnerabilities & Security Advisories 107

Browse all 107 CVE security advisories affecting UTT. AI-powered Chinese analysis, POCs, and references for each vulnerability.

UTT functions as a unified threat management platform, integrating firewall, intrusion prevention, and web application security into a single appliance for enterprise network protection. With ninety recorded Common Vulnerabilities and Exposures, the software has historically suffered from critical remote code execution flaws, allowing attackers to gain unauthorized system access without authentication. Cross-site scripting vulnerabilities have also been prevalent, enabling session hijacking and data exfiltration through malicious scripts injected into administrative interfaces. Additionally, privilege escalation bugs have permitted low-level users to attain root-level control, compromising the integrity of the entire security infrastructure. While the vendor has implemented various patches to address these weaknesses, the high volume of disclosed issues suggests persistent challenges in secure coding practices. These recurring defects highlight significant risks for organizations relying on UTT for perimeter defense, necessitating rigorous patch management and continuous monitoring to mitigate potential exploitation of known attack vectors.

CVE ID Title CVSS Severity Published
CVE-2026-3814 UTT HiPER 810G getOneApConfTempEntry strcpy buffer overflow — HiPER 810G CWE-120 8.8 High 2026-03-09
CVE-2026-3700 UTT HiPER 810G formConfigDnsFilterGlobal strcpy buffer overflow — HiPER 810G CWE-120 8.8 High 2026-03-08
CVE-2026-3699 UTT HiPER 810G formRemoteControl strcpy buffer overflow — HiPER 810G CWE-120 8.8 High 2026-03-08
CVE-2026-3698 UTT HiPER 810G NTP strcpy buffer overflow — HiPER 810G CWE-120 8.8 High 2026-03-08
CVE-2026-3016 UTT HiPER 810G formP2PLimitConfig strcpy buffer overflow — HiPER 810G CWE-120 8.8 High 2026-02-23
CVE-2026-3015 UTT HiPER 810G formPolicyRouteConf strcpy buffer overflow — HiPER 810G CWE-120 8.8 High 2026-02-23
CVE-2026-2981 UTT HiPER 810G formTaskEdit_ap strcpy buffer overflow — HiPER 810G CWE-120 8.8 High 2026-02-23
CVE-2026-2980 UTT HiPER 810G setSysAdm strcpy buffer overflow — HiPER 810G CWE-120 7.2 High 2026-02-23
CVE-2026-2935 UTT HiPER 810G ConfigExceptMSN strcpy buffer overflow — HiPER 810G CWE-120 7.2 High 2026-02-22
CVE-2026-2904 UTT HiPER 810G ConfigExceptAli strcpy buffer overflow — HiPER 810G CWE-120 8.8 High 2026-02-22
CVE-2026-2847 UTT HiPER 520 Web Management formReleaseConnect sub_44EFB4 os command injection — HiPER 520 CWE-78 7.2 High 2026-02-20
CVE-2026-2846 UTT HiPER 520 Web Management formPdbUpConfig sub_44D264 os command injection — HiPER 520 CWE-78 7.2 High 2026-02-20
CVE-2026-2188 UTT 进取 521G formPdbUpConfig sub_446B18 os command injection — 进取 521G CWE-78 7.2 High 2026-02-08
CVE-2026-2182 UTT 进取 521G setSysAdm doSystem command injection — 进取 521G CWE-77 7.2 High 2026-02-08
CVE-2026-2135 UTT HiPER 810 formPdbUpConfig sub_43F020 command injection — HiPER 810 CWE-77 6.3 Medium 2026-02-08
CVE-2026-2118 UTT HiPER 810 rehttpd formReleaseConnect sub_4407D4 command injection — HiPER 810 CWE-77 7.2 High 2026-02-08
CVE-2026-2086 UTT HiPER 810G Management formFireWall strcpy buffer overflow — HiPER 810G CWE-120 8.8 High 2026-02-07
CVE-2026-2080 UTT HiPER 810 formUser setSysAdm command injection — HiPER 810 CWE-77 7.2 High 2026-02-07
CVE-2026-2071 UTT 进取 520W formP2PLimitConfig strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-02-07
CVE-2026-2070 UTT 进取 520W formPolicyRouteConf strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-02-06
CVE-2026-2068 UTT 进取 520W formSyslogConf strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-02-06
CVE-2026-2067 UTT 进取 520W formTimeGroupConfig strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-02-06
CVE-2026-2066 UTT 进取 520W formIpGroupConfig strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-02-06
CVE-2026-1162 UTT HiPER 810 setSysAdm strcpy buffer overflow — HiPER 810 CWE-120 9.8 Critical 2026-01-19
CVE-2026-1140 UTT 进取 520W ConfigExceptAli strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-19
CVE-2026-1139 UTT 进取 520W ConfigExceptMSN strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-19
CVE-2026-1138 UTT 进取 520W ConfigExceptQQ strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-19
CVE-2026-1137 UTT 进取 520W formWebAuthGlobalConfig strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-19
CVE-2026-0841 UTT 进取 520W formPictureUrl strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-11
CVE-2026-0840 UTT 进取 520W formConfigNoticeConfig strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-11

This page lists every published CVE security advisory associated with UTT. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.