Vulnerability · Published Dec 12, 2025 · Assigned by VulDB

CVE-2025-14572UTT 进取 512W formWebAuthGlobalConfig memory corruption

High 8.8

In plain English

A high-severity memory corruption in 进取 512W from UTT. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.5% (higher than 89% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)3.5%top 10.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This affects an unknown part of the file /goform/formWebAuthGlobalConfig. Performing manipulation of the argument hidcontact results in memory corruption. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
UTT	进取 512W	1.7.7-171114

Weakness: CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-336196 | UTT 进取 512W formWebAuthGlobalConfig memory corruption vdb-entry, technical-description
VDB-336196 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #704107 | UTT (AiTai) Jinqi 512W <=v3v1.7.7-171114 Buffer Overflow third-party-advisory
https://github.com/alc9700jmo/CVE/issues/21 exploit, issue-tracking