What is the CVSS score of CVE-2026-3016?

CVE-2026-3016 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of 810g Firmware are affected by CVE-2026-3016?

A critical buffer overflow vulnerability exists in UTT HiPER 810G devices (versions up to 1.7.7-171114) that could allow attackers to execute arbitrary code and gain complete system control.

Is there a public PoC exploit available for CVE-2026-3016?

Yes, a public proof-of-concept exploit is available for CVE-2026-3016. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-3016?

Within 24 hours: Inventory all UTT HiPER 810G devices and isolate any internet-facing instances to internal networks only; disable remote management access if not critical. Within 7 days: Implement network segmentation to restrict access to affected devices to authorized administrators only; monitor for exploitation attempts. Within 30 days: Contact UTT for patch availability and upgrade timeline; evaluate replacement devices if patch is unavailable within 60 days; document all affected systems in asset management system.

810g Firmware CVE-2026-3016

HIGH

Buffer Overflow (CWE-119)

2026-02-23 cna@vuldb.com

Buffer Overflow 810g Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Feb 24, 2026 - 21:40 vuln.today

Public exploit code

CVE Published

Feb 23, 2026 - 16:29 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. The affected element is the function strcpy of the file /goform/formP2PLimitConfig. The manipulation of the argument except leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

AnalysisAI

Remote code execution in UTT HiPER 810G firmware versions up to 1.7.7-171114 allows authenticated attackers to achieve full system compromise through a buffer overflow in the P2P limit configuration function. The vulnerability exists due to unsafe use of strcpy() in the /goform/formP2PLimitConfig endpoint and is exploitable over the network with public exploit code currently available. No patch has been released, making this a critical risk for deployed devices.

Technical ContextAI

Classified as CWE-119 (Buffer Overflow). Affects 810G Firmware. A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. The affected element is the function strcpy of the file /goform/formP2PLimitConfig. The manipulation of the argument except leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible. Restrict network access to the affected service where possible.