The vulnerability is a buffer overflow in the gohead/sub_447CAC component of the UTT nv518G nv518GV3v3.2.7-210919-161313 firmware. A remote attacker can exploit this flaw to crash the device, resulting in a denial of service.

Affected systems are UTT nv518G nv518GV3v3.2.7-210919-161313 firmware. No other vendor or version information is available.

Risk assessment: The CVSS score is not provided, and EPSS is unavailable. The vulnerability is not listed in the CISA KEV catalog. It can be exploited remotely to cause a service outage. Because the exploit potential is unverified and no public exploit exists, the overall risk is moderate; however, a remote attacker could still trigger the failure and disrupt operations.