CVE-2025-7570
Published: 14 July 2025
Summary
CVE-2025-7570 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Utt 840G Firmware. Its CVSS base score is 7.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 18.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
A buffer overflow vulnerability exists in the UTT HiPER 840G router firmware up to version 3.1.1-190328. The flaw resides in an unknown function of the /goform/aspRemoteApConfTempSend endpoint and can be triggered by supplying crafted input to the remoteSrcTemp parameter. It is tracked as CVE-2025-7570, carries a CVSS 4.0 score of 7.4, and is associated with CWE-119 and CWE-120.
An authenticated remote attacker can send a malicious request to the affected endpoint and trigger the overflow. Successful exploitation may result in arbitrary code execution, memory corruption, or denial of service on the device. A proof-of-concept has been published publicly, and the vendor was notified but has not issued a response or patch.
The EPSS score remains low and unchanged at 0.0149 with no material increase after disclosure. Public references consist of a GitHub repository containing exploit details and entries on VulDB; no official mitigation guidance or firmware update is currently available.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-21306
Vulnerability details
A vulnerability was found in UTT HiPER 840G up to 3.1.1-190328. It has been rated as critical. Affected by this issue is some unknown functionality of the file /goform/aspRemoteApConfTempSend. The manipulation of the argument remoteSrcTemp leads to buffer overflow. The…
more
attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in public web form (/goform/aspRemoteApConfTempSend) of network device directly enables remote exploitation for code execution (T1190).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly prevents buffer overflows by requiring validation and sanitization of inputs like the remoteSrcTemp argument in the vulnerable /goform/aspRemoteApConfTempSend endpoint.
Implements memory protection mechanisms such as stack canaries, ASLR, and DEP to mitigate exploitation of buffer overflows even if invalid input reaches the vulnerable functionality.
Requires timely remediation of identified flaws like CVE-2025-7570 through patching, configuration changes, or feature disablement to eliminate the buffer overflow vulnerability.