Overview
A critical security vulnerability, designated as CVE-2025-10169, has been discovered in UTT 1200GW routers up to version 3.0.0-170831. This vulnerability pertains to a certain unknown functionality of the file /goform/ConfigWirelessBase, which when manipulated, leads to a buffer overflow. The significance of this vulnerability lies in its potential to compromise systems and result in data leakage, thereby posing serious security risks for organizations and individuals relying on these routers.
Vulnerability Summary
CVE ID: CVE-2025-10169
Severity: High (8.8 CVSS Score)
Attack Vector: Network
Privileges Required: None
User Interaction: None
Impact: Potential system compromise or data leakage
Affected Products
Share secrets securely
Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.
Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.
- • Encrypted identity
- • Private Spaces for organizations and teams
- • End-to-end encrypted chat, calls, files, and notes
- • Sensitive AI work and protected collaboration
- • Built for information that cannot leak
Our mission is to secure human work alongside AI.
Product | Affected Versions
UTT 1200GW | up to 3.0.0-170831
How the Exploit Works
The exploit takes advantage of a buffer overflow vulnerability in the /goform/ConfigWirelessBase file of the UTT 1200GW routers. An attacker can remotely manipulate the ‘ssid’ argument leading to the overflow of the buffer. This can allow the attacker to execute arbitrary code on the target system or cause the system to crash, leading to potential system compromise or data leakage.
Conceptual Example Code
Below is a conceptual example of a malicious HTTP request that manipulates the ‘ssid’ argument to exploit the vulnerability:
POST /goform/ConfigWirelessBase HTTP/1.1
Host: target.example.com
Content-Type: application/x-www-form-urlencoded
ssid="A"*5000 // This is a conceptual illustration; real exploit would involve crafted binary data.This request attempts to overflow the buffer by passing a string of “A”s that exceed the buffer’s capacity. In a real-world scenario, the attacker would craft a specific binary data that not only overflows the buffer but also includes malicious code to be executed on the target system.
Mitigation
Users of the affected UTT 1200GW versions are advised to apply vendor patches as soon as they become available. In the absence of a patch, it is recommended to use a Web Application Firewall (WAF) or an Intrusion Detection System (IDS) as a temporary mitigation measure. These systems can help detect and block malicious requests that attempt to exploit this vulnerability.