CVE-2026-76004
CriticalCVSS 9.9Summary
A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535, affecting the strcpy function in /goform/aspApBasicConfigUrcp. Manipulation of pvid leads to stack-based buffer overflow. Remote attack is possible and exploit is public.
Risk Assessment
Public exploit increases the risk of remote device compromise, potentially leading to network confidentiality and integrity breaches.
Recommendation
Update firmware to a patched version as soon as possible and restrict administrative access.
Original NVD description (English source)
A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argument pvid leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.