Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

UTT — Vulnerabilities & Security Advisories 99

Browse all 99 CVE security advisories affecting UTT. AI-powered Chinese analysis, POCs, and references for each vulnerability.

UTT functions as a unified threat management platform, integrating firewall, intrusion prevention, and web application security into a single appliance for enterprise network protection. With ninety recorded Common Vulnerabilities and Exposures, the software has historically suffered from critical remote code execution flaws, allowing attackers to gain unauthorized system access without authentication. Cross-site scripting vulnerabilities have also been prevalent, enabling session hijacking and data exfiltration through malicious scripts injected into administrative interfaces. Additionally, privilege escalation bugs have permitted low-level users to attain root-level control, compromising the integrity of the entire security infrastructure. While the vendor has implemented various patches to address these weaknesses, the high volume of disclosed issues suggests persistent challenges in secure coding practices. These recurring defects highlight significant risks for organizations relying on UTT for perimeter defense, necessitating rigorous patch management and continuous monitoring to mitigate potential exploitation of known attack vectors.

CVE IDTitleCVSSSeverityPublished
CVE-2025-15431 UTT 进取 512W formFtpServerDirConfig strcpy buffer overflow — 进取 512WCWE-120 8.8 High2026-01-02
CVE-2025-15430 UTT 进取 512W formFtpServerShareDirSelcet strcpy buffer overflow — 进取 512WCWE-120 8.8 High2026-01-02
CVE-2025-15429 UTT 进取 512W formConfigCliForEngineerOnly strcpy buffer overflow — 进取 512WCWE-120 8.8 High2026-01-02
CVE-2025-15428 UTT 进取 512W formRemoteControl strcpy buffer overflow — 进取 512WCWE-120 8.8 High2026-01-02
CVE-2025-15092 UTT 进取 512W ConfigExceptMSN strcpy buffer overflow — 进取 512WCWE-120 8.8 High2025-12-26
CVE-2025-15091 UTT 进取 512W formPictureUrl strcpy buffer overflow — 进取 512WCWE-120 8.8 High2025-12-25
CVE-2025-15090 UTT 进取 512W formConfigNoticeConfig strcpy buffer overflow — 进取 512WCWE-120 8.8 High2025-12-25
CVE-2025-15089 UTT 进取 512W APSecurity strcpy buffer overflow — 进取 512WCWE-120 8.8 High2025-12-25
CVE-2025-14572 UTT 进取 512W formWebAuthGlobalConfig memory corruption — 进取 512WCWE-119 8.8 High2025-12-12
CVE-2025-14535 UTT 进取 512W formConfigFastDirectionW strcpy buffer overflow — 进取 512WCWE-120 9.8 Critical2025-12-11
CVE-2025-14534 UTT 进取 512W Endpoint formNatStaticMap strcpy buffer overflow — 进取 512WCWE-120 9.8 Critical2025-12-11
CVE-2025-14191 UTT 进取 512W formP2PLimitConfig strcpy buffer overflow — 进取 512WCWE-120 8.8 High2025-12-07
CVE-2025-14141 UTT 进取 520W formArpBindConfig strcpy buffer overflow — 进取 520WCWE-120 8.8 High2025-12-06
CVE-2025-14140 UTT 进取 520W websHostFilter strcpy buffer overflow — 进取 520WCWE-120 6.5 Medium2025-12-06
CVE-2025-14139 UTT 进取 520W formConfigDnsFilterGlobal strcpy buffer overflow — 进取 520WCWE-120 5.7 Medium2025-12-06
CVE-2025-13442 UTT 进取 750W formPdbUpConfig system command injection — 进取 750WCWE-77 7.3 High2025-11-20
CVE-2025-11653 UTT HiPER 2620G fNTP strcpy buffer overflow — HiPER 2620GCWE-120 8.8 High2025-10-13
CVE-2025-11652 UTT 进取 518G formTaskEdit_ap buffer overflow — 进取 518GCWE-120 8.8 High2025-10-13
CVE-2025-11651 UTT 进取 518G formRemoteControl sub_4247AC buffer overflow — 进取 518GCWE-120 8.8 High2025-10-12
CVE-2025-11355 UTT 1250GW aspChangeChannel strcpy buffer overflow — 1250GWCWE-120 8.8 High2025-10-07
CVE-2025-11323 UTT 1250GW formUserStatusRemark strcpy buffer overflow — 1250GWCWE-120 8.8 High2025-10-06
CVE-2025-11305 UTT HiPER 840G formTaskEdit strcpy buffer overflow — HiPER 840GCWE-120 8.8 High2025-10-05
CVE-2025-10953 UTT 1200GW/1250GW formApMail buffer overflow — 1200GWCWE-120 8.8 High2025-09-25
CVE-2025-10757 UTT 1200GW formConfigDnsFilterGlobal buffer overflow — 1200GWCWE-120 8.8 High2025-09-20
CVE-2025-10756 UTT HiPER 840G getOneApConfTempEntry buffer overflow — HiPER 840GCWE-120 8.8 High2025-09-20
CVE-2025-10172 UTT 750W formPictureUrl buffer overflow — 750WCWE-120 8.8 High2025-09-09
CVE-2025-10171 UTT 1250GW formConfigApConfTemp sub_453DC buffer overflow — 1250GWCWE-120 8.8 High2025-09-09
CVE-2025-10170 UTT 1200GW formApLbConfig sub_4B48F8 buffer overflow — 1200GWCWE-120 8.8 High2025-09-09
CVE-2025-10169 UTT 1200GW ConfigWirelessBase buffer overflow — 1200GWCWE-120 8.8 High2025-09-09
CVE-2025-7571 UTT HiPER 840G aspApBasicConfigUrcp buffer overflow — HiPER 840GCWE-120 8.8 High2025-07-14

This page lists every published CVE security advisory associated with UTT. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.