CVE-2025-6098: UTT 进取 750W, грешка в паметта

Описание

Оригинално описание

A vulnerability was found in UTT 进取 750W up to 5.0. It has been classified as critical. This affects the function strcpy of the file /goform/setSysAdm of the component API. The manipulation of the argument passwd1 leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Засегнати продукти

• UTT 进取 750W: 5.0

Вид слабост

• CWE-120 Копиране в буфер без проверка на размера на входа
• CWE-119 Нарушаване на границите на буфер в паметта

История

Други уязвимости в UTT 进取 750W

• 7.3CVE-2025-13442
• 8.8CVE-2025-7116
• 6.9CVE-2025-6097

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-6098
• https://nvd.nist.gov/vuln/detail/CVE-2025-6098
• https://vuldb.com/?id.312567
• https://vuldb.com/?ctiid.312567
• https://vuldb.com/?submit.589437
• https://github.com/newym/cve/blob/main/utt1.md
• https://github.com/newym/cve/blob/main/utt1.md#poc