A vulnerability was determined in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub_446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the argument policyNames can lead to os command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
References
| Link | Resource |
|---|---|
| https://github.com/cha0yang1/UTT521G/blob/main/RCE2.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.344891 | Permissions Required VDB Entry |
| https://vuldb.com/?id.344891 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.749733 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
| AND |
|
History
10 Feb 2026, 14:57
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:utt:521g_firmware:3.1.1-190816:*:*:*:*:*:*:* cpe:2.3:h:utt:521g:2.0:*:*:*:*:*:*:* |
|
| First Time |
Utt
Utt 521g Utt 521g Firmware |
|
| References | () https://github.com/cha0yang1/UTT521G/blob/main/RCE2.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.344891 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.344891 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.749733 - Third Party Advisory, VDB Entry |
08 Feb 2026, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-08 22:15
Updated : 2026-02-10 14:57
NVD link : CVE-2026-2188
Mitre link : CVE-2026-2188
CVE.ORG link : CVE-2026-2188
JSON object : View
Products Affected
utt
- 521g
- 521g_firmware