CVE-2025-10756 is a critical buffer overflow vulnerability affecting UTT HiPER 840G devices running firmware up to version 3.1.1-190328. This flaw, residing in the /goform/getOneApConfTempEntry function, can be triggered by manipulating the 'tempName' argument. With a CVSS score of 8.8 (HIGH), this vulnerability allows for remote attacks with low attack complexity and no user interaction, potentially leading to full compromise of confidentiality, integrity, and availability. An exploit has been publicly released, indicating a high likelihood of active exploitation, though there is currently minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.1.1-190328CPE matchmatch criteria | cpe:2.3:o:utt:840g_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.