Buffer Overflow Vulnerability in UTT HiPER 840G by UTT
CVE-2025-11305

8.7HIGH

Key Information:

Vendor

Utt

Status
Hiper 840g
Vendor
CVE Published:
5 October 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-11305?

A vulnerability exists in the UTT HiPER 840G networking device, specifically within the strcpy function in the /goform/formTaskEdit file. By exploiting this flaw through the manipulation of the 'txtMin2' argument, an attacker could trigger a buffer overflow. This condition potentially allows for remote exploitation. Despite being notified early about this issue, the vendor has not provided any response or mitigative actions. Users are urged to assess their devices and take appropriate precautions.

Affected Version(s)

HiPER 840G 3.1.1-190328

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-11305 - Proof of Concept

References

https://vuldb.com/?id.327186
vdb-entrytechnical-description
https://vuldb.com/?ctiid.327186
signaturepermissions-required
https://vuldb.com/?submit.661807
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

MaximDeVere (VulDB User)
JSON
.