1200Gw Firmware CVE-2026-31058

This vulnerability presents moderate real-world risk despite the low CVSS score. The attack vector is adjacent network (AV:A), requiring the attacker to be on the same local network segment-a realistic constraint in many corporate and residential settings where the gateway device resides. The critical requirement is high privilege level (PR:H), which significantly limits the attack surface; only administrators or accounts with configuration access can exploit this. The CVSS vector correctly reflects no confidentiality or integrity compromise (C:N/I:N), only availability impact (A:H). The primary limiting factors are: (1) local/adjacent network requirement eliminates remote exploitation, (2) authentication and high-privilege requirement restricts threat actor pool to insider threats or compromised admin accounts, (3) impact is denial of service only, not code execution. However, in environments where admin credentials are shared, weak, or recently compromised, this becomes a realistic attack path. The absence of public exploit code and KEV confirmation status indicates this is not actively weaponized, reducing urgency but not risk dismissal for affected organizations.

An attacker with administrative credentials on a corporate network could access the UTT HiPER 1200GW web interface and submit a crafted HTTP request with an oversized timeRangeName parameter to the formConfigDnsFilterGlobal endpoint, causing a buffer overflow that crashes the device and disrupts DNS filtering and gateway functionality for all connected users. Alternatively, a malicious insider with administrator access could intentionally trigger this overflow as a denial-of-service attack against network availability. No public proof-of-concept code is documented, though the vulnerability is referenced in a GitHub research repository (https://github.com/zxq0408/Vul202601/blob/main/2.md) which may contain technical details or proof-of-concept information.