CVE-2025-15431 | UTT 进取 512W 1.7.7-171114 formFtpServerDirConfig strcpy filename buffer overflow

A vulnerability was found in UTT 进取 512W 1.7.7-171114. It has been declared as critical. This affects the function strcpy of the file /goform/formFtpServerDirConfig. Executing manipulation of the argument filename can lead to buffer overflow.

This vulnerability is tracked as CVE-2025-15431. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.