Description
A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-08-05
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A stack-based buffer overflow exists in the HiPER 1250GW firmware where the strcpy function in /goform/getOneApConfTempEntry is called with an unvalidated tempName argument. By sending a deliberately long value, an attacker can overwrite return addresses on the stack and potentially execute arbitrary code. The weakness is a classic stack corruption scenario (CWE‑119 and CWE‑121) that can compromise confidentiality, integrity, and availability of the device and any network that it controls.

Affected Systems

UTT HiPER 1250GW devices running firmware versions up to v3.2.7-210907-180535 are impacted. The vulnerability is present in the up‑to‑date firmware review report and affects all deployments of the affected software build.

Risk and Exploitability

The CVSS score of 8.7 indicates a high severity, and no EPSS score is available, but the vendor acknowledged a publicly available exploit. The attack can be launched remotely against the exposed web interface, and the failure to contain the overflow can lead to remote code execution. The vulnerability is not listed in the CISA KEV catalog, but the publicly known exploit raises the likelihood of real world exploitation.

Generated by OpenCVE AI on August 5, 2026 at 03:35 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply an official firmware update that fixes the unchecked strcpy call in getOneApConfTempEntry.
  • Place the affected device behind a firewall or VLAN that blocks unsolicited traffic to the /goform/getOneApConfTempEntry endpoint, limiting exposure to trusted management hosts only.
  • Continuously monitor web logs for anomalous POST requests to the getOneApConfTempEntry path, particularly requests containing unusually long tempName parameters, and investigate any suspected exploitation attempts.

Generated by OpenCVE AI on August 5, 2026 at 03:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 05 Aug 2026 02:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title UTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflow
First Time appeared Utt
Utt hiper 1250gw
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:a:utt:hiper_1250gw:*:*:*:*:*:*:*:*
Vendors & Products Utt
Utt hiper 1250gw
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 8.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Utt Hiper 1250gw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-05T02:00:12.032Z

Reserved: 2026-08-04T19:59:17.724Z

Link: CVE-2026-18897

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-05T03:45:03Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow