Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
SQL query. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d774bd22-4d4e-42d4-b4ae-c833dd36aa79?source=cve - https://wordpress.org/plugins/pagbank-connect/ - https://github.com/r-martins/PagBank-WooCommerce/commit/a9c3352fae0bb17b4c359ebe212bf4652e756b43#diff-b2c1b76195d79c48df3a3a809e0fa3e7ce08dc4a4ad6e9bba3c599ae1c28c2d2 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&repo
3a3a809e0fa3e7ce08dc4a4ad6e9bba3c599ae1c28c2d2 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3358325%40pagbank-connect&new=3358325%40pagbank-connect&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10143 State: PUBLISHED Published: 2025-09-17T01:49:15.450Z Last Updated: 2025-09-17T13:11:53.399Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: catchthemes Products: Catch Dark Mode Problem Types: CWE-98 Description: The Catch Dark Mode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0 via the 'catch_dark_mode' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data,
lowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/46776cd5-5262-46ea-b56c-0cbf2b9ae43d?source=cve - https://plugins.trac.wordpress.org/browser/catch-dark-mode/trunk/plugin.php#L483 - https://wordpress.org/plugins/catch-dark-mode - https://plugins.trac.wordpress.org/changeset/3359058/
CVE ID: CVE-2025-10144 State: PUBLISHED Published: 2025-11-24T22:28:24.500Z Last Updated: 2025-11-24T22:28:24.500Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: quadlayers Products: Perfect Brands for WooCommerce Problem Types: CWE-89 Description: The Perfect Brands for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the `brands` attribute of the `products` shortcode in all versions up to, and including, 3.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to a
he existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f4618bfd-77d9-4396-b041-d7ba0f6ec75a?source=cve - https://plugins.trac.wordpress.org/browser/perfect-woocommerce-brands/tags/3.6.0/lib/class-woocommerce.php#L112
CVE ID: CVE-2025-10145 State: PUBLISHED Published: 2025-10-28T05:27:29.647Z Last Updated: 2025-10-28T20:04:08.491Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: themeisle Products: Auto Featured Image (Auto Post Thumbnail) Problem Types: CWE-918 Description: The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.1.7 via the upload_to_library function. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify informatio
web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. On Cloud instances, this issue allows for metadata retrieval. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/93acfae6-470b-4637-b76b-e1162b80253f?source=cve - https://plugins.trac.wordpress.org/browser/auto-post-thumbnail/tags/4.1.7/includes/class-apt.php#L821
CVE ID: CVE-2025-10146 State: PUBLISHED Published: 2025-09-19T04:27:04.280Z Last Updated: 2025-09-19T12:01:51.872Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: codename065 Products: Download Manager Problem Types: CWE-79 Description: The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘user_ids’ parameter in all versions up to, and including, 3.3.23 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additi
in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b1adb414-8945-4e11-8770-dab3285d608e?source=cve - https://plugins.trac.wordpress.org/browser/download-manager/tags/3.3.23/src/Admin/views/stats/history.php#L225
CVE ID: CVE-2025-10147 State: PUBLISHED Published: 2025-09-23T08:26:15.173Z Last Updated: 2025-09-23T19:33:28.739Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: eteubert Products: Podlove Podcast Publisher Problem Types: CWE-434 Description: The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'move_as_original_file' function in all versions up to, and including, 4.2.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: R
fected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/093058f1-c717-424f-9bd5-4838df8d20a1?source=cve - https://plugins.trac.wordpress.org/browser/podlove-podcasting-plugin-for-wordpress/tags/4.2.6/lib/model/image.php#L465 - https://plugins.trac.wordpress.org/changeset/3364994/
CVE ID: CVE-2025-10148 State: PUBLISHED Published: 2025-09-12T05:10:37.469Z Last Updated: 2025-11-18T20:05:32.822Z Vendors: curl Products: curl Problem Types: CWE-340 Generation of Predictable Numbers or Identifiers Description: curl's websocket code did not update the 32 bit mask pattern for each new outgoing frame as the specification says. Instead it used a fixed mask that persisted and was used throughout the entire connection. A predictable mask pattern allows for a malicious server to induce traffic between the two communicating parties that could be interpreted by an involved proxy (configured or transparent) as genuine, real, HTTP traffic with content and thereby poison its cache. Th
involved proxy (configured or transparent) as genuine, real, HTTP traffic with content and thereby poison its cache. That cached poisoned content could then be served to all users of that proxy. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://curl.se/docs/CVE-2025-10148.json - https://curl.se/docs/CVE-2025-10148.html - https://hackerone.com/reports/3330839
CVE ID: CVE-2025-10150 State: PUBLISHED Published: 2025-10-28T07:24:38.296Z Last Updated: 2025-10-28T13:28:01.850Z Vendors: Softing Industrial Automation GmbH Products: smartLink HW-PN, smartLink HW-DP Problem Types: CWE-833 Description: Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10150.html - https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10150.json
CVE ID: CVE-2025-10151 State: PUBLISHED Published: 2025-10-28T07:25:39.639Z Last Updated: 2025-10-28T13:27:14.343Z Vendors: Softing Industrial Automation GmbH Products: smartLink HW-PN, smartLink HW-DP Problem Types: CWE-667 Description: Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10151.html - https://https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10151.json
CVE ID: CVE-2025-10155 State: PUBLISHED Published: 2025-09-17T09:38:15.056Z Last Updated: 2025-09-17T13:04:03.089Z Vendors: mmaitre314 Products: picklescan Problem Types: CWE-20 Description: An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass pickle files security checks by supplying a standard pickle file with a PyTorch-related file extension. When the pickle file incorrectly considered safe is loaded, it can lead to the execution of malicious code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mmaitre314/picklescan/blob/58983e1c20973ac42f2df7ff1
st Notes: - CISA ADP Vulnrichment: References: - https://github.com/mmaitre314/picklescan/blob/58983e1c20973ac42f2df7ff15d7c8cd32f9b688/src/picklescan/scanner.py#L463 - https://github.com/mmaitre314/picklescan/security/advisories/GHSA-jgw4-cr84-mqxg
CVE ID: CVE-2025-10156 State: PUBLISHED Published: 2025-09-17T10:41:51.737Z Last Updated: 2025-09-17T13:04:36.225Z Vendors: mmaitre314 Products: picklescan Problem Types: CWE-755 Description: An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check (CRC), which causes the scanner to halt and fail to analyze the contents for malicious pickle files. When the file incorrectly considered safe is loaded, it can lead to the execution of malicious code. Additional Analyst Notes: - CISA AD
correctly considered safe is loaded, it can lead to the execution of malicious code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huggingface.co/jinaai/jina-embeddings-v2-base-en/resolve/main/pytorch_model.bin?download=true - https://huggingface.co/jinaai/jina-embeddings-v2-base-en/tree/main - https://github.com/mmaitre314/picklescan/blob/v0.0.29/src/picklescan/relaxed_zipfile.py#L35 - https://github.com/mmaitre314/picklescan/security/advisories/GHSA-mjqp-26hc-grxg
CVE ID: CVE-2025-10157 State: PUBLISHED Published: 2025-09-17T11:33:03.680Z Last Updated: 2025-09-17T13:07:38.291Z Vendors: mmaitre314 Products: picklescan Problem Types: CWE-693 Description: A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass the unsafe globals check. This is possible because the scanner performs an exact match for module names, allowing malicious payloads to be loaded via submodules of dangerous packages (e.g., 'asyncio.unix_events' instead of 'asyncio'). When the incorrectly considered safe file is loaded after scan, it can lead to the execution of malicious code. Additional Analyst N
orrectly considered safe file is loaded after scan, it can lead to the execution of malicious code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mmaitre314/picklescan/security/advisories/GHSA-f7qq-56ww-84cr - https://huggingface.co/iluem/linux_pkl/resolve/main/asyncio_asyncio_unix_events___UnixSubprocessTransport__start.pkl - https://github.com/mmaitre314/picklescan/blob/2a8383cfeb4158567f9770d86597300c9e508d0f/src/picklescan/scanner.py#L309
CVE ID: CVE-2025-10158 State: PUBLISHED Published: 2025-11-18T14:24:19.210Z Last Updated: 2025-11-19T16:48:56.591Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: rsync Products: rsync Problem Types: CWE-129 Description: A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RsyncProject/rsync/commit/797e17fc4a6f15e3b1756538a9f812b63942686f - https://attackerkb.com/
ences: - https://github.com/RsyncProject/rsync/commit/797e17fc4a6f15e3b1756538a9f812b63942686f - https://attackerkb.com/assessments/fbacb2a6-d1cd-4011-bb3a-f06b1c8306b1
CVE ID: CVE-2025-10159 State: PUBLISHED Published: 2025-09-09T20:58:26.650Z Last Updated: 2025-09-10T16:10:07.518Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sophos Products: AP6 Series Wireless Access Points Problem Types: CWE-620 Description: An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Points older than firmware version 1.7.2563 (MR7). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20250909-ap6
CVE ID: CVE-2025-10161 State: PUBLISHED Published: 2025-11-11T12:42:50.253Z Last Updated: 2025-11-14T18:22:58.881Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Turkguven Software Technologies Inc. Products: Perfektive Problem Types: CWE-307, CWE-602, CWE-807 Description: Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass.This issue affects Perfektive: before Version: 12574 Build: 2701. Additional Analyst Notes: - CISA ADP V
ionality Bypass.This issue affects Perfektive: before Version: 12574 Build: 2701. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0387
CVE ID: CVE-2025-10162 State: PUBLISHED Published: 2025-10-07T06:00:04.678Z Last Updated: 2025-10-07T14:14:40.657Z Vendors: Unknown Products: Admin and Customer Messages After Order for WooCommerce: OrderConvo Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin before 14 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/download arbitrary files via a path traversal attack Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f878615d-955d-4365-87
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f878615d-955d-4365-87e0-6c928f548986/
CVE ID: CVE-2025-10164 State: PUBLISHED Published: 2025-09-09T18:32:06.015Z Last Updated: 2025-09-10T19:43:10.855Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: lmsys Products: sglang Problem Types: CWE-502, CWE-20 Description: A security flaw has been discovered in lmsys sglang 0.4.6. Affected by this vulnerability is the function main of the file /update_weights_from_tensor. The manipulation of the argument serialized_named_tensors results in deserialization. The attack can be launched remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional An
and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323203 - https://vuldb.com/?ctiid.323203 - https://vuldb.com/?submit.635919
CVE ID: CVE-2025-10165 State: PUBLISHED Published: 2025-10-03T11:17:23.636Z Last Updated: 2025-10-03T13:57:27.086Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: hovanesvn Products: AP Background Problem Types: CWE-79 Description: The AP Background plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'adv_parallax_back' shortcode in all versions up to, and including, 3.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user acc
with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f98b848c-9f97-4d00-97de-7651b9035731?source=cve - https://plugins.trac.wordpress.org/browser/ap-background/trunk/includes/shortCodeClass.php#L44 - https://wordpress.org/plugins/ap-background
CVE ID: CVE-2025-10166 State: PUBLISHED Published: 2025-09-17T01:49:14.281Z Last Updated: 2025-09-17T13:53:16.369Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: tw2113 Products: Social Media Shortcodes Problem Types: CWE-79 Description: The Social Media Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'twitter' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a u
ackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0d96465a-d1b6-4991-8e81-e80a0d15a902?source=cve - https://plugins.trac.wordpress.org/browser/social-media-shortcodes/trunk/social_media_shortcode_plugin.php#L187 - https://wordpress.org/plugins/social-media-shortcodes - https://plugins.trac.wordpress.org/changeset/3359485/
CVE ID: CVE-2025-10167 State: PUBLISHED Published: 2025-10-11T09:28:36.721Z Last Updated: 2025-10-14T20:15:00.742Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpcodefactory Products: Stock History & Reports Manager for WooCommerce Problem Types: CWE-79 Description: The Stock History & Reports Manager for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_stock_snapshot_restocked shortcode in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and
ping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/13ffe550-699a-4244-b0e1-859c113d77c0?source=cve - https://plugins.trac.wordpress.org/browser/stock-snapshot-for-woocommerce/trunk/includes/class-alg-wc-stock-snapshot-shortcodes.php#L174 - https://wordpress.org/plugins/stock-snapshot-for-woocommerce
CVE ID: CVE-2025-10168 State: PUBLISHED Published: 2025-09-30T03:35:31.054Z Last Updated: 2025-09-30T15:33:06.448Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mucasoft Products: Any News Ticker Problem Types: CWE-79 Description: The Any News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'any-ticker' shortcode in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesse
h contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c0e7bcae-fcb9-4802-b5f5-9c07a2038baa?source=cve - https://plugins.trac.wordpress.org/browser/any-news-ticker/trunk/src/ticker-main.php#L66 - https://wordpress.org/plugins/any-news-ticker
CVE ID: CVE-2025-10169 State: PUBLISHED Published: 2025-09-09T21:02:07.241Z Last Updated: 2025-09-10T16:09:30.982Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: UTT Products: 1200GW Problem Types: CWE-120, CWE-119 Description: A weakness has been identified in UTT 1200GW up to 3.0.0-170831. Affected by this issue is some unknown functionality of the file /goform/ConfigWirelessBase. This manipulation of the argument ssid causes buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes
exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323204 - https://vuldb.com/?ctiid.323204 - https://vuldb.com/?submit.636696 - https://github.com/lin-3-start/lin-cve/blob/main/UTT%201200GW-1/UTT%201200GW-1.md
CVE ID: CVE-2025-10170 State: PUBLISHED Published: 2025-09-09T21:02:09.730Z Last Updated: 2025-09-10T13:39:21.472Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: UTT Products: 1200GW Problem Types: CWE-120, CWE-119 Description: A security vulnerability has been detected in UTT 1200GW up to 3.0.0-170831. This affects the function sub_4B48F8 of the file /goform/formApLbConfig. Such manipulation of the argument loadBalanceNameOld leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA A
The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323205 - https://vuldb.com/?ctiid.323205 - https://vuldb.com/?submit.636697 - https://github.com/lin-3-start/lin-cve/blob/main/UTT%201200GW-2/UTT%201200GW-2.md
CVE ID: CVE-2025-10171 State: PUBLISHED Published: 2025-09-09T21:32:05.636Z Last Updated: 2025-09-10T20:25:41.372Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: UTT Products: 1250GW Problem Types: CWE-120, CWE-119 Description: A vulnerability was detected in UTT 1250GW up to 3.2.2-200710. This vulnerability affects the function sub_453DC of the file /goform/formConfigApConfTemp. Performing manipulation results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference