CVE-2025-6732 | UTT HiPER 840G up to 3.1.1-190328 API /goform/setSysAdm strcpy passwd1 buffer overflow

A vulnerability was found in UTT HiPER 840G up to 3.1.1-190328. It has been classified as critical. This affects the function strcpy of the file /goform/setSysAdm of the component API. The manipulation of the argument passwd1 leads to buffer overflow.

This vulnerability is uniquely identified as CVE-2025-6732. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.