Impact
A buffer overflow exists in the pools parameter of the formArpBindConfig function of UTT Aggressive HiPER 1200GW firmware v2.5.3-170306. The overflow allows an attacker to send crafted input that corrupts memory, causing the device to crash and become unavailable. The vulnerability does not enable code execution or data theft; its primary consequence is service disruption.
Affected Systems
The affected devices are UTT Aggressive HiPER 1200GW routers running firmware version 2.5.3-170306. No other products or firmware revisions are listed in the advisory, so the impact is limited to this specific model and revision.
Risk and Exploitability
The CVSS score is not specified, and the EPSS score is unavailable. The vulnerability has not been reported in the CISA Known Exploited Vulnerabilities catalog. Likely exploitation requires the ability to send a specially crafted payload to the formArpBindConfig interface, which may be accessible locally or from the external network if the device exposes this functionality. An attacker who can reach the interface can trigger a crash, resulting in a denial of service. No persistence, data exfiltration, or lateral movement is described, but repeated attacks could degrade network reliability.
OpenCVE Enrichment