A buffer overflow occurs in the filename parameter of the formFtpServerDirConfig function in UTT Aggressive 520W firmware version 1.7.7-180627. This flaw allows an attacker to craft an input that triggers the overflow, causing the device to crash or become unresponsive. The primary consequence is loss of availability for the affected system, potentially disrupting network operations that rely on the FTP service.

UTT’s Aggressive 520W hardware running firmware 1.7.7-180627 is impacted. No other vendors, products, or versions are listed as affected.

The CVSS score of 4.5 indicates a moderate severity. The EPSS score is less than 1%, suggesting a low likelihood of exploitation. The vulnerability is not listed in CISA’s KEV catalog. Based on the function name it is inferred that the flaw can be triggered remotely through the FTP configuration interface, but explicit exploitation details are not provided in the description.