CVE-2026-9628
HighSummary
A weakness has been identified in UTT HiPER 1200GW up to version 2.5.3-170306, affecting an unknown function of the file /goform/formPptpClientConfig in the Web Management Interface. Manipulation of the PPTP server address/username/password/tunnel name arguments causes stack-based buffer overflow.
Risk Assessment
The attack may be initiated remotely, posing a serious security threat to the system. A publicly available exploit could be used for attacks.
Recommendation
It is recommended to update the device to the latest firmware version to mitigate this vulnerability. Additionally, monitor network traffic for potential attack attempts.
Original NVD description (English source)
A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown function of the file /goform/formPptpClientConfig of the component Web Management Interface. This manipulation of the argument PPTP server address/username/password/tunnel name causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.