A buffer overflow occurs in the strcpy call within the UTT HiPER 2610G firmware's /goform/formNatStaticMap handler. By manipulating the NatBinds argument, an attacker can overwrite adjacent memory, potentially corrupting program control data. The flaw falls under CWE-119 and CWE-120. While the CVE notes that the exploit is publicly available, the description does not state a definitive outcome; however, typical buffer overflows of this nature can lead to arbitrary code execution or privilege escalation.

The vulnerability is present in UTT HiPER 2610G routers running firmware versions up to and including 3.0.0-171107. Devices with these firmware releases are susceptible; versions newer than 3.0.0-171107 are presumed immune unless further information emerges.

The CVSS score of 5.1 indicates moderate risk, and the lack of an EPSS rating means current exploit prevalence is unknown. The vulnerability is not listed in the CISA KEV catalog, reducing evidence of a widespread active campaign. The likely attack vector is remote HTTP access to /goform/formNatStaticMap, potentially requiring authentication or being open to unauthenticated users on externally reachable devices. An attacker could exploit this flaw from any remote location where the device is reachable, making it a relevant threat for externally facing network equipment.