CVE-2025-15430
Published: 02 January 2026
Summary
CVE-2025-15430 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Utt 512W Firmware. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 33.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly validates the oldfilename argument in the vulnerable /goform/formFtpServerShareDirSelcet endpoint to prevent buffer overflow from crafted inputs.
Implements memory safeguards such as stack canaries, DEP, and ASLR to block arbitrary code execution even if the strcpy buffer overflow occurs.
Requires timely identification, reporting, and correction of the known buffer overflow flaw in the UTT firmware, including applying patches or workarounds when available.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in web endpoint (/goform/formFtpServerShareDirSelcet) enables remote authenticated low-privilege exploitation for arbitrary code execution, directly facilitating T1190 (Exploit Public-Facing Application) and T1068 (Exploitation for Privilege Escalation).
NVD Description
A vulnerability was detected in UTT 进取 512W 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formFtpServerShareDirSelcet. Performing a manipulation of the argument oldfilename results in buffer overflow. The attack can be initiated remotely. The exploit…
more
is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Deeper analysisAI
CVE-2025-15430 is a buffer overflow vulnerability (CWE-119, CWE-120) in UTT 进取 512W firmware version 1.7.7-171114. The flaw resides in the strcpy function within the file /goform/formFtpServerShareDirSelcet, triggered by manipulating the oldfilename argument. Published on 2026-01-02, it carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
An authenticated remote attacker with low privileges can exploit this vulnerability without user interaction. By sending a crafted request, the attacker induces a buffer overflow, potentially achieving arbitrary code execution, data corruption, or denial of service with high impacts on confidentiality, integrity, and availability. A public exploit is available for use.
VulDB advisories (ctiid.339352, id.339352) and a GitHub repository document the issue, including a proof-of-concept at the POC section. The vendor was contacted early but provided no response or patches, leaving affected systems without official mitigations.
Details
- CWE(s)