CVE-2025-15462
Published: 05 January 2026
Summary
CVE-2025-15462 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Utt 520W Firmware. Its CVSS base score is 7.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 46.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2025-15462 is a buffer overflow vulnerability affecting the UTT 进取 520W router firmware version 1.7.7-180627. The flaw exists in the strcpy function within the /goform/ConfigAdvideo component, where manipulation of the timestart argument triggers the overflow. This issue aligns with CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-120 (Buffer Copy without Checking Size of Input).
The vulnerability enables remote exploitation by an attacker possessing low privileges (PR:L), requiring network access (AV:N), low attack complexity (AC:L), and no user interaction (UI:N). Successful exploitation can result in high impacts to confidentiality, integrity, and availability (C:H/I:H/A:H), with an overall CVSS v3.1 base score of 8.8 in an unchanged scope (S:U), potentially allowing arbitrary code execution or system compromise.
Advisories from VulDB and a GitHub repository document the issue, including a publicly disclosed proof-of-concept exploit. The vendor was contacted early regarding disclosure but provided no response, and no patches or official mitigations are available. Security practitioners should isolate affected devices and monitor for exploitation attempts using the referenced POC.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-0907
Vulnerability details
A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the argument timestart leads to buffer overflow. The attack is possible to be carried out remotely. The…
more
exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in web form (/goform/ConfigAdvideo) on network-accessible router enables remote code execution on public-facing application.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly prevents buffer overflows by validating the size and format of inputs like the 'timestart' argument before processing in the /goform/ConfigAdvideo function.
Implements runtime memory protections such as ASLR, stack canaries, and DEP to block arbitrary code execution even if the buffer overflow in strcpy occurs.
Establishes processes to identify, prioritize, and remediate flaws like this unpatched buffer overflow, potentially through firmware replacement or isolation.