A stack‑based buffer overflow occurs during the processing of the strcpy function in the /goform/formTaskEdit handler. The flaw allows an attacker to send an overly long string, which overflows the buffer, corrupts the stack, and gives the attacker the ability to execute arbitrary code on the device. This leads to full compromise of the affected device, including control of system functions and data.

The vulnerability exists in UTT HiPER 1200GW firmware versions up to 2.5.3‑170306. The affected product is the UTT HiPER 1200GW, a form‑task management system provided by UTT.

The CVSS score of 8.7 indicates a high impact severity, and the EPSS score is not available; however, the public nature of the exploit and remote launchability raise the likelihood of active exploitation. The vulnerability is not listed in the CISA KEV catalog, but the risk remains significant due to the potential for remote code execution.