Description
Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_447CAC component
Published: 2026-06-30
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Buffer overflow in the gohead/sub_447CAC component of UTT nv518G firmware (nv518GV3v3.2.7-210919-161313) allows a remote attacker to cause a device reboot or stop responding, disrupting network services. This classic CWE‑120 flaw arises from insufficient input validation, enabling an attacker to overwrite memory and trigger a crash.

Affected Systems

UTT model 518G devices running firmware nv518GV3v3.2.7-210919-161313 contain the vulnerable gohead/sub_447CAC module.

Risk and Exploitability

The CVSS score of 7.5 indicates a high severity, while the EPSS score of less than 1% shows a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is remote over the network, with an attacker needing to send a specifically crafted packet or payload to trigger the overflow and cause a device reboot or crash.

Generated by OpenCVE AI on July 16, 2026 at 00:35 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the vendor‑provided firmware update that fixes the gohead/sub_447CAC buffer overflow component (CWE‑120).
  • Restrict network traffic to the device with firewall or access controls to limit exposure to the vulnerable component.
  • Monitor the device for unexpected restarts or crashes and plan for rapid replacement if the issue persists.

Generated by OpenCVE AI on July 16, 2026 at 00:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 16 Jul 2026 01:00:00 +0000

Type Values Removed Values Added
Title Remote Buffer Overflow in UTT 518G Firmware Causing Denial of Service

Tue, 14 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT 518G Firmware Causes Remote Denial of Service

Mon, 13 Jul 2026 06:15:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT 518G Firmware Causes Remote Denial of Service

Sat, 11 Jul 2026 17:45:00 +0000

Type Values Removed Values Added
Title Remote DoS via Buffer Overflow in UTT nv518G Firmware Component

Fri, 10 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
Title Remote DoS via Buffer Overflow in UTT nv518G Firmware Component

Wed, 08 Jul 2026 20:45:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Tue, 07 Jul 2026 17:00:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Tue, 07 Jul 2026 05:15:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Mon, 06 Jul 2026 13:00:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Sun, 05 Jul 2026 23:45:00 +0000

Type Values Removed Values Added
Title Buffer Overflow Causing Denial of Service on UTT 518G Firmware

Sun, 05 Jul 2026 07:45:00 +0000

Type Values Removed Values Added
Title Buffer Overflow Causing Denial of Service on UTT 518G Firmware

Sat, 04 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Fri, 03 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Thu, 02 Jul 2026 15:15:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Thu, 02 Jul 2026 05:15:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Wed, 01 Jul 2026 21:15:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via Buffer Overflow in UTT nv518G nv518GV3v3.2.7-210919-161313
Weaknesses CWE-119

Wed, 01 Jul 2026 19:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-120
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 01 Jul 2026 05:00:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via Buffer Overflow in UTT nv518G nv518GV3v3.2.7-210919-161313
Weaknesses CWE-119

Tue, 30 Jun 2026 23:15:00 +0000

Type Values Removed Values Added
Description Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_447CAC component
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-07-01T18:01:17.436Z

Reserved: 2026-06-08T00:00:00.000Z

Link: CVE-2026-52193

cve-icon Vulnrichment

Updated: 2026-07-01T18:01:04.832Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-16T00:45:04Z

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')