The vulnerability is a buffer overflow caused by the unsafe use of strcpy in the /goform/formUser handler of UTT HiPER 1200GW firmware. An attacker can supply an excessively long input that overwrites adjacent memory, potentially enabling arbitrary code execution, a system crash, or other memory corruption effects. The primary impact is the compromise of the device’s confidentiality, integrity, and availability through unauthorized code execution.

Devices running UTT HiPER 1200GW firmware versions up to 2.5.3-1703 are affected. The flaw resides in the web‑interface handler formUser; no later firmware revision is noted as solving the issue, so all earlier releases remain vulnerable.

The CVSS score of 8.7 reflects high severity, and although no EPSS value is available, the vulnerability is not listed in the CISA KEV catalog. The attack vector is remote, as the weakness exists in a publicly exposed web endpoint, and published exploits are available. An attacker can trigger the overflow by crafting a request to /goform/formUser, leading to potential remote code execution if the overflow is successfully exploited.