The vulnerability is a buffer overflow in the notes parameter of the formGroupConfig function, allowing an attacker to supply crafted input that overflows a buffer and crashes the device, resulting in a denial of service. No code execution or privilege escalation is described.

UTT Aggressive HiPER 810G version 3v1.7.7-171114 is affected. No additional vendor or product coverage is specified in the CVE report.

EPSS information is not available and the vulnerability is not listed in CISA’s KEV catalog. The CVSS score is not provided, so the documented severity is unknown. Based on the description, the likely attack vector involves a remote client that submits a malicious notes payload to the formGroupConfig interface. If the function is exposed over a network, an attacker could trigger the overflow and disrupt service without needing local privileges. The risk is considered moderate to high if the endpoint is accessible but mitigatable through input validation or firmware updates.