Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formIpGroupConfig. Executing a manipulation of the argument groupName can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-2066 A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formIpGroupConfig. Executing a manipulation of the argu… https://www.cve.org/CVERecord?id=CVE-2026-2066
Post summary
A weakness in UTT 进取 520W 1.7.7-180627 affecting the `strcpy` function of `/goform/formIpGroupConfig` has been identified; further details are available via the CVE record link.
🟠 CVE-2026-2066 - High A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formIpGroupConfig. Executing a manipulation of the argument groupName can l... https://www.thehackerwire.com/vulnerability/CVE-2026-2066/ https://t.co/GzjJX6uTDU
Post summary
The tweet announces CVE-2026-2066, a high‑severity buffer‑overflow vulnerability in UTT 进取 520W firmware affecting the strcpy function in /goform/formIpGroupConfig via manipulation of the groupName argument.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | utt | 520w | 3.0 | - | - |
| OS | utt | 520w_firmware | 1.7.7-180627 | - | - |