Utt

810 Firmware

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-70998

Exploit
  • EPSS 0.17%
  • Veröffentlicht 18.02.2026 00:00:00
  • Zuletzt bearbeitet 19.02.2026 18:47:14

UTT HiPER 810 / nv810v4 router firmware v1.5.0-140603 was discovered to contain insecure default credentials for the telnet service, possibly allowing a remote attacker to gain root access via a crafted script.

8.8

CVE-2026-2135

Exploit
  • EPSS 0.35%
  • Veröffentlicht 08.02.2026 04:32:07
  • Zuletzt bearbeitet 13.02.2026 18:40:09

A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_43F020 of the file /goform/formPdbUpConfig. Performing a manipulation of the argument policyNames results in command injection. It is possible to ini...

7.2

CVE-2026-2118

Exploit
  • EPSS 0.4%
  • Veröffentlicht 08.02.2026 00:02:07
  • Zuletzt bearbeitet 13.02.2026 18:46:55

A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_4407D4 of the file /goform/formReleaseConnect of the component rehttpd. Executing a manipulation of the argument Isp_Name can lead to command injec...

7.2

CVE-2026-2080

Exploit
  • EPSS 0.4%
  • Veröffentlicht 07.02.2026 09:02:06
  • Zuletzt bearbeitet 13.02.2026 18:49:08

A vulnerability has been found in UTT HiPER 810 1.7.4-141218. This issue affects the function setSysAdm of the file /goform/formUser. The manipulation of the argument passwd1 leads to command injection. Remote exploitation of the attack is possible. ...

9.8

CVE-2026-1162

Exploit
  • EPSS 0.14%
  • Veröffentlicht 19.01.2026 16:32:06
  • Zuletzt bearbeitet 06.02.2026 19:18:18

A flaw has been found in UTT HiPER 810 1.7.4-141218. The impacted element is the function strcpy of the file /goform/setSysAdm. This manipulation of the argument passwd1 causes buffer overflow. Remote exploitation of the attack is possible. The explo...