Description
Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_425994 component
Published: 2026-06-30
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A buffer overflow exists in the gohead/sub_425994 component of the UTT nv518G firmware version 518GV3v3.2.7-210919-161313. The flaw allows a remote attacker to deliver crafted input that overflows the stack, causing the device to crash or reboot. The result is a denial of service; no evidence of confidentiality or integrity compromise is disclosed.

Affected Systems

The only affected devices are UTT nv518G series machines running firmware 518GV3v3.2.7-210919-161313. No other vendors or products are listed in the CVE data.

Risk and Exploitability

With a CVSS score of 7.5, the vulnerability is high severity. The EPSS score of 0.00423 indicates a very low but non-zero likelihood of exploitation. It is not listed in the CISA KEV catalog. An attacker can execute the overflow remotely via the vulnerable gohead/sub_425994 service, likely triggering a reboot or crash that disrupts availability. No confirmed exploitation reports are known.

Generated by OpenCVE AI on July 15, 2026 at 11:20 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Verify if UTT has released a firmware update that fixes the buffer overflow; review vendor advisories or support channels for an official patch.
  • Configure firewalls or segmentation to block or restrict traffic that reaches the gohead/sub_425994 service, limiting exposure.
  • Set up monitoring and alerting for abnormal reboots or crashes on the device, so repeated failures trigger a security investigation.

Generated by OpenCVE AI on July 15, 2026 at 11:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 15 Jul 2026 11:45:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Enables Remote DoS

Tue, 14 Jul 2026 02:00:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Enables Remote DoS

Sat, 11 Jul 2026 17:45:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware

Fri, 10 Jul 2026 19:00:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware

Thu, 09 Jul 2026 22:30:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware

Wed, 08 Jul 2026 15:00:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware

Tue, 07 Jul 2026 17:00:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware

Mon, 06 Jul 2026 17:15:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware

Mon, 06 Jul 2026 04:00:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via Buffer Overflow in UTT nv518G gohead Component

Sun, 05 Jul 2026 15:45:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via Buffer Overflow in UTT nv518G gohead Component

Sun, 05 Jul 2026 07:45:00 +0000

Type Values Removed Values Added
Title Denial of Service via Buffer Overflow in UTT nv518G Firmware

Sat, 04 Jul 2026 08:30:00 +0000

Type Values Removed Values Added
Title Denial of Service via Buffer Overflow in UTT nv518G Firmware

Fri, 03 Jul 2026 20:45:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Enables Remote DoS

Fri, 03 Jul 2026 06:15:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Enables Remote DoS

Thu, 02 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware

Thu, 02 Jul 2026 01:00:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware

Wed, 01 Jul 2026 20:00:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Allows Remote Denial of Service
Weaknesses CWE-119

Wed, 01 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-120
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 01 Jul 2026 05:00:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in UTT nv518G Firmware Allows Remote Denial of Service
Weaknesses CWE-119

Tue, 30 Jun 2026 23:15:00 +0000

Type Values Removed Values Added
Description Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_425994 component
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-07-01T18:04:28.739Z

Reserved: 2026-06-08T00:00:00.000Z

Link: CVE-2026-52198

cve-icon Vulnrichment

Updated: 2026-07-01T18:04:20.375Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-15T11:30:17Z

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')