CVE-2025-15090

Summary

A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the function strcpy of the file /goform/formConfigNoticeConfig. The manipulation of the argument timestart results in buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.

Affected Software

Weaknesses

• CWE-120: Buffer Overflow
• CWE-119: Memory Corruption

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://vuldb.com/?id.338419
• https://vuldb.com/?ctiid.338419
• https://vuldb.com/?submit.708349
• https://github.com/cymiao1978/cve/blob/main/new/15.md
• https://github.com/cymiao1978/cve/blob/main/new/15.md#poc

• ←Previous
• Next→