The vulnerability is a stack-based buffer overflow that is triggered by manipulating the Profile argument to the /goform/formRemoteControl endpoint on UTT HiPER 1250GW devices. The CVE notes that the attack can be executed remotely and that an exploit has been released to the public. While the description does not explicitly state the end result, a buffer overflow of this nature can potentially lead to arbitrary code execution or other memory corruption effects, but that outcome is an inference based on the type of flaw.

UTT HiPER 1250GW firmware versions up to and including 3.2.7-210907-180535 are affected. The CVE does not list newer releases, so devices running any firmware equal to or older than this version remain vulnerable.

The CVSS score of 8.7 indicates high severity. An exploit is publicly available, which increases the likelihood of an attack occurring. No EPSS score is provided and the vulnerability is not listed in KEV, but given the remote nature of the attack vector and the known exploit, the risk to affected systems is significant. The attack can be performed remotely without authentication through the web interface, making it accessible to a wide range of adversaries.