CVE-2025-6097 - CVE House
Back to Database
Status published Medium CVE-2025-6097

UTT 进取 750W Administrator Password setSysAdm formDefineManagement unverified password change

Vulnerability Description

A vulnerability was found in UTT 进取 750W up to 5.0 and classified as critical. Affected by this issue is the function formDefineManagement of the file /goform/setSysAdm of the component Administrator Password Handler. The manipulation of the argument passwd1 leads to unverified password change. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-6097

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • pfwqdxwdd (VulDB User)

References

More from UTT

View All →
CVE-2025-7571
UTT HiPER 840G aspApBasicConfigUrcp buffer overflow
High 8.7
CVE-2025-7570
UTT HiPER 840G aspRemoteApConfTempSend buffer overflow
High 8.7
CVE-2025-7118
UTT HiPER 840G formPictureUrl buffer overflow
High 8.7
CVE-2025-7117
UTT HiPER 840G websWhiteList buffer overflow
High 8.7
CVE-2025-7116
UTT 进取 750W Fast_wireless_conf buffer overflow
High 8.7

Affected Vendor

Affected Software

进取 750W
Vulnerable Versions:
5.0

Timeline

Official Publish: June 16th, 2025
Last Modified: June 16th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

Weaknesses (CWE)

CWE-620 CWE-640

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.