Which versions of UTT HiPER 1200GW are affected by CVE-2026-10292?

UTT HiPER 1200GW routers (firmware ≤2.5.3-170306) contain a remote buffer overflow vulnerability that allows authenticated attackers to corrupt memory and potentially seize control of critical…

Is there a public PoC exploit available for CVE-2026-10292?

Yes, a public proof-of-concept exploit is available for CVE-2026-10292. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-10292?

24 hours: Identify all UTT HiPER 1200GW routers in production and document firmware versions; immediately restrict administrative access to router management interfaces (particularly /goform/formTaskEdit endpoint) via firewall rules. 7 days: Implement network segmentation to isolate affected routers and disable remote management protocols where operationally feasible; contact UTT directly for patch release timeline. 30 days: Complete a device replacement evaluation; deploy alternative router models from vendors with active support if UTT does not release a patch.

UTT HiPER 1200GW CVE-2026-10292

Q: What is the CVSS score of CVE-2026-10292?

CVE-2026-10292 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-33821 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-06-01 VulDB

GHSA-wrr2-9hf7-vjc4

Buffer Overflow Stack Overflow Hiper 1200Gw

7.4

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Jun 01, 2026 - 22:30 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 01, 2026 - 22:29 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 01, 2026 - 22:22 vuln.today

cvss_changed

CVSS changed

Jun 01, 2026 - 22:22 NVD

8.8 (HIGH) 7.4 (HIGH)

Analysis Generated

Jun 01, 2026 - 22:15 vuln.today

DescriptionCVE.org

A vulnerability was detected in UTT HiPER 1200GW up to 2.5.3-170306. This affects the function strcpy of the file /goform/formTaskEdit. The manipulation results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.

AnalysisAI

Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware versions up to 2.5.3-170306) allows remote authenticated attackers to corrupt memory via the strcpy function in the /goform/formTaskEdit endpoint. Publicly available exploit code exists, raising the practical risk despite the requirement for low-level privileges. No KEV listing or EPSS data is provided in the input, so widespread automated exploitation has not been confirmed.

Technical ContextAI

The affected product (cpe:2.3:a:utt:hiper_1200gw) is a small-business/SOHO gateway router manufactured by UTT Technologies. The flaw is classified as CWE-121 (Stack-based Buffer Overflow), rooted in the use of the unsafe strcpy() C library function inside the formTaskEdit handler of the device's web management interface (/goform/ path is typical of embedded Boa/GoAhead-style web servers). Because strcpy() performs no bounds checking on the destination buffer, attacker-supplied input copied from an HTTP form field overruns the fixed-size stack buffer, overwriting saved return addresses and potentially enabling control-flow hijack on the MIPS/ARM firmware typical of these devices.

RemediationAI

No vendor-released patch identified at time of analysis - UTT has not published a fixed firmware version in the available references. As compensating controls, restrict access to the router's web management interface to a trusted management VLAN or admin workstation by binding the HTTP/HTTPS admin service to LAN-only and explicitly disabling WAN-side administration (side effect: remote admin convenience is lost). Replace default and weak administrator credentials with strong unique passwords to raise the bar against the PR:L requirement, and place the device behind an upstream firewall blocking inbound TCP 80/443/8080 to the device from the internet. Monitor https://vuldb.com/vuln/367585 for vendor firmware updates and consider device replacement if UTT does not issue a fix, since end-of-life SOHO routers commonly remain unpatched.