← Database

CVE-2026-2847

HIGH CVSS: 7.2 Published: 2026-02-20 Modified: 2026-06-17

Description

A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub_44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. The manipulation of the argument Isp_Name results in os command injection. The attack can be launched remotely. The exploit is now public and may be used.

Affected Platforms

Utt 520 FirmwareUtt 520

Weakness Type

CWE-77, CWE-78

References