A buffer overflow exists in the strcpy function within the /goform/formApLbConfig handler of UTT HiPER 810G. By manipulating the loadBalanceNameOld argument, a remote attacker can overflow a buffer, potentially leading to memory corruption. The vulnerability is identified as CWE-119 (Buffer Overflow) and CWE-120 (Buffer-Related Error). If successfully exploited, the attacker could gain arbitrary code execution or crash the device, impacting confidentiality, integrity, and availability of the network equipment.

All UTT HiPER 810G devices running firmware versions up to and including 1.7.7‑171114 are affected. No specific sub‑models or later releases are listed as impacted.

The CVSS score of 8.7 indicates high severity. The exploit is publicly disclosed and can be initiated remotely through the formApLbConfig endpoint. While the EPSS score is not available and the vulnerability is not in the CISA KEV catalog, the remote nature and lack of mitigation make it likely to be targeted. Exploit conditions require the ability to send crafted input to the loadBalanceNameOld parameter.