Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

UTT — Vulnerabilities & Security Advisories 107

Browse all 107 CVE security advisories affecting UTT. AI-powered Chinese analysis, POCs, and references for each vulnerability.

UTT functions as a unified threat management platform, integrating firewall, intrusion prevention, and web application security into a single appliance for enterprise network protection. With ninety recorded Common Vulnerabilities and Exposures, the software has historically suffered from critical remote code execution flaws, allowing attackers to gain unauthorized system access without authentication. Cross-site scripting vulnerabilities have also been prevalent, enabling session hijacking and data exfiltration through malicious scripts injected into administrative interfaces. Additionally, privilege escalation bugs have permitted low-level users to attain root-level control, compromising the integrity of the entire security infrastructure. While the vendor has implemented various patches to address these weaknesses, the high volume of disclosed issues suggests persistent challenges in secure coding practices. These recurring defects highlight significant risks for organizations relying on UTT for perimeter defense, necessitating rigorous patch management and continuous monitoring to mitigate potential exploitation of known attack vectors.

CVE ID Title CVSS Severity Published
CVE-2026-0839 UTT 进取 520W APSecurity strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-11
CVE-2026-0838 UTT 进取 520W ConfigWirelessBase strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-11
CVE-2026-0837 UTT 进取 520W formFireWall strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-11
CVE-2026-0836 UTT 进取 520W formConfigFastDirectionW strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-11
CVE-2025-15462 UTT 进取 520W ConfigAdvideo strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-05
CVE-2025-15461 UTT 进取 520W formTaskEdit strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-05
CVE-2025-15460 UTT 进取 520W formPptpClientConfig strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-05
CVE-2025-15459 UTT 进取 520W formUser strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2026-01-05
CVE-2025-15431 UTT 进取 512W formFtpServerDirConfig strcpy buffer overflow — 进取 512W CWE-120 8.8 High 2026-01-02
CVE-2025-15430 UTT 进取 512W formFtpServerShareDirSelcet strcpy buffer overflow — 进取 512W CWE-120 8.8 High 2026-01-02
CVE-2025-15429 UTT 进取 512W formConfigCliForEngineerOnly strcpy buffer overflow — 进取 512W CWE-120 8.8 High 2026-01-02
CVE-2025-15428 UTT 进取 512W formRemoteControl strcpy buffer overflow — 进取 512W CWE-120 8.8 High 2026-01-02
CVE-2025-15092 UTT 进取 512W ConfigExceptMSN strcpy buffer overflow — 进取 512W CWE-120 8.8 High 2025-12-26
CVE-2025-15091 UTT 进取 512W formPictureUrl strcpy buffer overflow — 进取 512W CWE-120 8.8 High 2025-12-25
CVE-2025-15090 UTT 进取 512W formConfigNoticeConfig strcpy buffer overflow — 进取 512W CWE-120 8.8 High 2025-12-25
CVE-2025-15089 UTT 进取 512W APSecurity strcpy buffer overflow — 进取 512W CWE-120 8.8 High 2025-12-25
CVE-2025-14572 UTT 进取 512W formWebAuthGlobalConfig memory corruption — 进取 512W CWE-119 8.8 High 2025-12-12
CVE-2025-14535 UTT 进取 512W formConfigFastDirectionW strcpy buffer overflow — 进取 512W CWE-120 9.8 Critical 2025-12-11
CVE-2025-14534 UTT 进取 512W Endpoint formNatStaticMap strcpy buffer overflow — 进取 512W CWE-120 9.8 Critical 2025-12-11
CVE-2025-14191 UTT 进取 512W formP2PLimitConfig strcpy buffer overflow — 进取 512W CWE-120 8.8 High 2025-12-07
CVE-2025-14141 UTT 进取 520W formArpBindConfig strcpy buffer overflow — 进取 520W CWE-120 8.8 High 2025-12-06
CVE-2025-14140 UTT 进取 520W websHostFilter strcpy buffer overflow — 进取 520W CWE-120 6.5 Medium 2025-12-06
CVE-2025-14139 UTT 进取 520W formConfigDnsFilterGlobal strcpy buffer overflow — 进取 520W CWE-120 5.7 Medium 2025-12-06
CVE-2025-13442 UTT 进取 750W formPdbUpConfig system command injection — 进取 750W CWE-77 7.3 High 2025-11-20
CVE-2025-11653 UTT HiPER 2620G fNTP strcpy buffer overflow — HiPER 2620G CWE-120 8.8 High 2025-10-13
CVE-2025-11652 UTT 进取 518G formTaskEdit_ap buffer overflow — 进取 518G CWE-120 8.8 High 2025-10-13
CVE-2025-11651 UTT 进取 518G formRemoteControl sub_4247AC buffer overflow — 进取 518G CWE-120 8.8 High 2025-10-12
CVE-2025-11355 UTT 1250GW aspChangeChannel strcpy buffer overflow — 1250GW CWE-120 8.8 High 2025-10-07
CVE-2025-11323 UTT 1250GW formUserStatusRemark strcpy buffer overflow — 1250GW CWE-120 8.8 High 2025-10-06
CVE-2025-11305 UTT HiPER 840G formTaskEdit strcpy buffer overflow — HiPER 840G CWE-120 8.8 High 2025-10-05

This page lists every published CVE security advisory associated with UTT. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.