A buffer overflow exists in the pools parameter of the formArpBindConfig function on the UTT Aggressive HiPER 1200GW router firmware v2.5.3‑170306, enabling attackers to trigger a DoS through crafted input. This flaw corresponds to CWE‑120 and can be exploited by sending malformed data that overflows the buffer, causing the device to become unresponsive.

The vulnerable product is the UTT Aggressive HiPER 1200GW router (model 1200GW) running firmware version 2.5.3‑170306. The CPE entries indicate a hardware device and its firmware. No other affected versions are listed.

The CVSS score of 4.5 indicates moderate risk and the EPSS score of less than 1% suggests a low probability of widespread exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is through the device’s management or configuration interface, where an attacker sends a specially crafted payload to the formArpBindConfig function.