A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.
History

Wed, 08 Apr 2026 20:15:00 +0000

Type Values Removed Values Added
Title Remote Command Execution in UTT Aggressive HiPER 520W /goform/formDia Component
Weaknesses CWE-78

Tue, 07 Apr 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Utt 520w
Utt 520w Firmware
Weaknesses CWE-77
CPEs cpe:2.3:h:utt:520w:3.0:*:*:*:*:*:*:*
cpe:2.3:o:utt:520w_firmware:1.7.7-180627:*:*:*:*:*:*:*
Vendors & Products Utt 520w
Utt 520w Firmware
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}


Tue, 07 Apr 2026 00:00:00 +0000

Type Values Removed Values Added
Title Remote Command Execution in UTT Aggressive HiPER 520W /goform/formDia Component
First Time appeared Utt
Utt hiper 520w
Weaknesses CWE-78
Vendors & Products Utt
Utt hiper 520w

Mon, 06 Apr 2026 15:30:00 +0000

Type Values Removed Values Added
Description A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-04-06T00:00:00.000Z

Updated: 2026-04-06T14:52:39.144Z

Reserved: 2026-03-09T00:00:00.000Z

Link: CVE-2026-31059

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-04-06T15:17:08.210

Modified: 2026-04-07T20:33:30.010

Link: CVE-2026-31059

cve-icon Redhat

No data.