CVE-2026-78169
CriticalCVSS 9.9Summary
A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. It affects the strcpy function in the file /goform/aspRemoteApConfTempSend of the HTTP Request Handler component. Manipulating the Profile argument results in a stack-based buffer overflow. The attack can be carried out remotely, and the exploit is public.
Risk Assessment
A remote attacker can cause device crash or execute arbitrary code, potentially leading to full control of the network device.
Recommendation
Update the firmware to the latest version if available, and restrict access to the administrative interface to trusted IP addresses only.
Original NVD description (English source)
A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.