CVE-2025-15429
Published: 02 January 2026
Summary
CVE-2025-15429 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Utt 512W Firmware. Its CVSS base score is 7.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 47.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2025-15429 is a buffer overflow vulnerability in the UTT 进取 512W firmware version 1.7.7-171114. The issue affects the strcpy function within the /goform/formConfigCliForEngineerOnly file, where manipulation of the addCommand argument triggers the overflow. Classified under CWE-119 and CWE-120, it carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high severity due to its potential for significant impact.
The vulnerability enables remote exploitation by attackers with low privileges over the network, requiring no user interaction. Successful exploitation allows arbitrary code execution, granting high levels of confidentiality, integrity, and availability compromise, such as data theft, modification, or denial of service on the affected device.
Advisories from VulDB and related disclosures note that a proof-of-concept exploit is publicly available on GitHub, increasing the risk of active misuse. The vendor was notified early but has not responded or issued patches, leaving no official mitigations; practitioners should isolate affected devices, monitor for suspicious activity on the /goform endpoint, and consider firmware upgrades if released.
Notable context includes the public disclosure of the exploit, which may facilitate widespread attacks on unpatched UTT 进取 512W devices. No evidence of in-the-wild exploitation is reported in available sources.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-0710
Vulnerability details
A security vulnerability has been detected in UTT 进取 512W 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formConfigCliForEngineerOnly. Such manipulation of the argument addCommand leads to buffer overflow. It is possible to launch the attack…
more
remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in public web form (/goform endpoint) directly enables remote code execution on network device via T1190 Exploit Public-Facing Application.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly remediates the buffer overflow flaw in the strcpy function by requiring timely identification, reporting, and patching of the vulnerability in the firmware.
Validates and sanitizes the addCommand input parameter to prevent buffer overflow exploitation via malformed or oversized data in the /goform/formConfigCliForEngineerOnly endpoint.
Implements memory protections such as stack canaries, ASLR, and DEP to mitigate arbitrary code execution from the buffer overflow vulnerability.