Skip to main content

UTT HiPER 1200GW CVE-2026-19341

| EUVDEUVD-2026-54910 HIGH
Stack-based Buffer Overflow (CWE-121)
2026-08-09 VulDB GHSA-mjp7-537m-x465
Stack Overflow Buffer Overflow Hiper 1200Gw
7.4
CVSS 4.0 · Vendor: VulDB
Share

Severity by source

Vendor (VulDB) PRIMARY
7.4 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
8.8 HIGH

Network-accessible management endpoint requires low-privilege authentication (PR:L); no scope change as impact is fully contained to the device itself.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

3
Analysis Generated
Aug 09, 2026 - 07:36 vuln.today
CVSS changed
Aug 09, 2026 - 07:22 NVD
8.7 (HIGH) 7.4 (HIGH)
CVE Published
Aug 09, 2026 - 07:00 cve.org
HIGH 7.4

DescriptionCVE.org

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Stack-based buffer overflow in UTT HiPER 1200GW firmware (versions up to 2.5.3-170306) enables authenticated remote attackers to corrupt stack memory via the EncryptionMode parameter in the PPTP VPN configuration endpoint, potentially achieving arbitrary code execution on the device. The root cause is unsafe use of strcpy() without bounds validation in the /goform/pptpSrvGlobalConfig handler. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain low-privilege management credentials
Delivery
Send crafted POST to /goform/pptpSrvGlobalConfig
Exploit
Supply oversized EncryptionMode parameter
Execution
strcpy() overflows fixed stack buffer
Persist
Overwrite return address with attacker payload
Impact
Achieve arbitrary code execution on device
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires low-privilege authentication to the HiPER 1200GW web management interface (PR:L per CVSS 4.0 vector) - the attacker must hold at minimum a guest-level or operator-level account on the device. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 base score of 7.4 (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) reflects a network-accessible, low-complexity attack requiring only low-privilege authentication, with full confidentiality, integrity, and availability impact on the vulnerable device. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker holding low-privilege credentials on the UTT HiPER 1200GW management interface - obtained via default credentials, credential stuffing, or a prior foothold - sends a crafted HTTP POST request to /goform/pptpSrvGlobalConfig supplying an oversized EncryptionMode value. The unsafe strcpy() call overflows the stack buffer, overwriting the return address to redirect execution to attacker-controlled code, enabling arbitrary command execution at device-level privileges. …
Remediation No vendor-released patch has been identified at time of analysis - the vendor was contacted prior to public disclosure and did not respond. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: identify all UTT HiPER 1200GW devices running firmware 2.5.3-170306 or earlier; isolate management interfaces using firewall rules to permit administration only from hardened internal networks; audit and disable unnecessary administrative accounts on these devices. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Hiper 1200Gw

View all
CVE-2026-76003 HIGH POC
8.6 Aug 19

Stack-based buffer overflow in UTT HiPER 1200GW firmware through version 2.5.3-170306 enables remote code execution via

CVE-2026-18898 HIGH POC
7.4 Aug 05

Stack-based buffer overflow in UTT HiPER 1200GW firmware up to v2.5.3-170306 enables network-reachable authenticated att
CVE-2026-78170 HIGH POC
7.4 Aug 24

Remote buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows network-reachable authenticated

CVE-2026-10293 HIGH POC
7.4 Jun 01

Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows authenticated remote attack
CVE-2026-10292 HIGH POC
7.4 Jun 01

Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware versions up to 2.5.3-170306) allows remote authenticat
CVE-2026-6186 HIGH POC
7.4 Apr 13

Buffer overflow in UTT HiPER 1200GW router versions up to 2.5.3-170306 enables remote authenticated attackers to execute
CVE-2026-4487 HIGH POC
7.4 Mar 20

Unauthenticated attackers can trigger a buffer overflow in UTT HiPER 1200GW firmware versions up to 2.5.3-170306 via the

Same weakness CWE-121 – Stack-based Buffer Overflow

View all
CVE-2025-0282 CRITICAL POC
9.0
CVE-2025-22457 CRITICAL POC
9.8
CVE-2012-10060 CRITICAL POC
9.3
CVE-2012-10053 CRITICAL POC
9.3
CVE-2013-10064 CRITICAL POC
9.3
CVE-2012-10023 MEDIUM POC
6.9
CVE-2012-10058 CRITICAL POC
10.0
CVE-2013-10068 CRITICAL POC
9.4

Same technique Stack Overflow

View all
CVE-2025-0282 CRITICAL POC
9.0
CVE-2025-22457 CRITICAL POC
9.8
CVE-2012-10060 CRITICAL POC
9.3
CVE-2012-10053 CRITICAL POC
9.3
CVE-2013-10064 CRITICAL POC
9.3
CVE-2012-10023 MEDIUM POC
6.9
CVE-2012-10058 CRITICAL POC
10.0
CVE-2013-10068 CRITICAL POC
9.4

Share

CVE-2026-19341 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy