UTT HiPER 1250GW vulnerabilities

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. It affects the strcpy function in the file /goform/aspRemoteApConfTempSend of the HTTP Request Handler component. Manipulating the Profile argument results in a stack-based buffer overflow. The attack can be carried out remotely, and the exploit is public.

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535, affecting the strcpy function in /goform/aspApBasicConfigUrcp. Manipulation of pvid leads to stack-based buffer overflow. Remote attack is possible and exploit is public.

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306, affecting the strcpy function in /goform/formGroupConfig. Manipulation of timestart leads to stack-based buffer overflow. Remote attack is possible and exploit is public.

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306 in the strcpy function of the file /goform/formConfigFastDirectionW. Manipulating the ssid argument can lead to buffer overflow. The attack may be performed remotely and the exploit has been published.

A stack-based buffer overflow vulnerability exists in UTT HiPER 1200GW up to 2.5.3-170306 in the strcpy function of /goform/pptpSrvGlobalConfig. Manipulating the EncryptionMode argument allows remote code execution. The exploit is public, and the vendor did not respond.

A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the argument timestart results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.

A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

A vulnerability was found in UTT HiPER 1250GW up to version 3.2.7-210907-180535 in the file /goform/ConfigWirelessBase_5g. Manipulation of the ssid argument leads to a stack-based buffer overflow, potentially allowing remote code execution. The exploit has been publicly disclosed.

Buffer overflow vulnerability in the strcpy function in /goform/formConfigDnsFilterGlobal on UTT HiPER 2610G up to version 3.0.0-171107. Manipulating the GroupName argument can lead to buffer overflow.

UTT HiPER 2610G router up to version 3.0.0-171107 has a buffer overflow in the strcpy function of the file /goform/formNatStaticMap when manipulating the NatBinds argument. The exploit has been made public and could be used.

A stack-based buffer overflow vulnerability has been found in UTT HiPER 1200GW up to version 2.5.3-170306 in the strcpy function of the /goform/formFireWall file. Manipulation of the Profile argument leads to buffer overflow. The attack can be launched remotely and the exploit is public.

A stack-based buffer overflow vulnerability was detected in UTT HiPER 1200GW up to version 2.5.3-170306 in the strcpy function of the /goform/formTaskEdit file. The attack can be performed remotely. The exploit is publicly available.

A flaw in UTT HiPER 1250GW up to version 3.2.7-210907-180535 exists in the strcpy function of the Web Management Interface. Manipulating the Profile argument leads to a stack-based buffer overflow. The attack is remotely exploitable and the exploit is public.

In the UTT HiPER 1250GW router up to version 3.2.7-210907-180535, a stack-based buffer overflow vulnerability exists in the strcpy function in the file /goform/formConfigFastDirectionW. A remote attacker can manipulate the Profile parameter, leading to buffer overflow.

A stack-based buffer overflow vulnerability has been detected in UTT HiPER 1200GW up to version 2.5.3-170306 in an unknown function of the /goform/formPptpClientConfig file. Manipulation of the PPTP server address, username, password, or tunnel name arguments leads to buffer overflow. The attack can be initiated remotely and the exploit is public.

A security flaw in UTT HiPER 1200GW up to version 2.5.3-170306 affects the Web Management Interface. The strcpy function in /goform/setSysAdm allows buffer overflow via the sysAdmUser/sysAdmPass arguments. The attack is remotely exploitable and the exploit is publicly available.

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. It affects the function strcpy in the file /goform/formNatStaticMap. Manipulation of the argument NatBind results in buffer overflow. Remote exploitation is possible, and the exploit is publicly available.

A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. It affects an unknown function in the file /goform/formRemoteControl. Manipulation of the argument Profile results in stack-based buffer overflow. The attack can be executed remotely, and the exploit is publicly available.