Skip to main content

UTT HiPER 1200GW CVE-2026-18898

| EUVDEUVD-2026-53027 HIGH
Stack-based Buffer Overflow (CWE-121)
2026-08-05 VulDB GHSA-7xrf-7g6v-89wc
Buffer Overflow Stack Overflow Hiper 1200Gw
7.4
CVSS 4.0 · Vendor: VulDB
Share

Severity by source

Vendor (VulDB) PRIMARY
7.4 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
8.8 HIGH

Network-reachable management endpoint requires low-privilege authentication (PR:L); full device compromise (C:H/I:H/A:H) confined to vulnerable system with no scope change.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

5
Analysis Updated
Aug 05, 2026 - 04:29 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Aug 05, 2026 - 04:22 vuln.today
cvss_changed
CVSS changed
Aug 05, 2026 - 04:22 NVD
8.7 (HIGH) 7.4 (HIGH)
Analysis Generated
Aug 05, 2026 - 03:43 vuln.today
CVE Published
Aug 05, 2026 - 03:00 cve.org
HIGH 8.7

DescriptionCVE.org

A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the argument timestart results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Stack-based buffer overflow in UTT HiPER 1200GW firmware up to v2.5.3-170306 enables network-reachable authenticated attackers to corrupt stack memory and achieve arbitrary code execution on the device. The vulnerable C runtime function strcpy in the web management endpoint /goform/ConfigAdvideo performs no bounds validation on the timestart HTTP parameter, allowing oversized input to overwrite return addresses and redirect execution flow. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain low-privilege management credentials
Delivery
Authenticate to HiPER 1200GW web portal
Exploit
Send crafted HTTP POST to /goform/ConfigAdvideo with oversized timestart
Execution
strcpy overwrites stack return address
Persist
Redirect execution to attacker-controlled payload
Impact
Achieve remote code execution on device
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires network access to the HiPER 1200GW web management HTTP/HTTPS interface and possession of valid low-privilege credentials (confirmed by CVSS 4.0 PR:L). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) establishes a high-severity, low-complexity, network-reachable flaw requiring only low-privilege credentials with no user interaction. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who has obtained low-privilege credentials to the HiPER 1200GW web management interface - through credential stuffing, default credentials, or prior compromise - sends a crafted HTTP POST request to /goform/ConfigAdvideo containing an oversized timestart parameter value. The unguarded strcpy call copies the oversized value onto the stack, overwriting the function's return address with an attacker-controlled value. …
Remediation No vendor-released patch has been identified at time of analysis; UTT did not respond to the responsible disclosure, leaving all firmware versions at or below v2.5.3-170306 without a supported fix. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Identify all HiPER 1200GW devices via network discovery and asset management; immediately restrict web management interface access (ports 80/443) to trusted administrative networks via firewall ACLs and revoke or reset default management credentials. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Hiper 1200Gw

View all
CVE-2026-76003 HIGH POC
8.6 Aug 19

Stack-based buffer overflow in UTT HiPER 1200GW firmware through version 2.5.3-170306 enables remote code execution via

CVE-2026-19341 HIGH POC
7.4 Aug 09

Stack-based buffer overflow in UTT HiPER 1200GW firmware (versions up to 2.5.3-170306) enables authenticated remote atta
CVE-2026-78170 HIGH POC
7.4 Aug 24

Remote buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows network-reachable authenticated

CVE-2026-10293 HIGH POC
7.4 Jun 01

Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows authenticated remote attack
CVE-2026-10292 HIGH POC
7.4 Jun 01

Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware versions up to 2.5.3-170306) allows remote authenticat
CVE-2026-6186 HIGH POC
7.4 Apr 13

Buffer overflow in UTT HiPER 1200GW router versions up to 2.5.3-170306 enables remote authenticated attackers to execute
CVE-2026-4487 HIGH POC
7.4 Mar 20

Unauthenticated attackers can trigger a buffer overflow in UTT HiPER 1200GW firmware versions up to 2.5.3-170306 via the

Same weakness CWE-121 – Stack-based Buffer Overflow

View all
CVE-2025-0282 CRITICAL POC
9.0
CVE-2025-22457 CRITICAL POC
9.8
CVE-2012-10060 CRITICAL POC
9.3
CVE-2012-10053 CRITICAL POC
9.3
CVE-2013-10064 CRITICAL POC
9.3
CVE-2012-10023 MEDIUM POC
6.9
CVE-2012-10058 CRITICAL POC
10.0
CVE-2013-10068 CRITICAL POC
9.4

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Share

CVE-2026-18898 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy