1200Gw Firmware CVE-2026-31063

The CVSS score of 4.5 is moderate but constrained by several limiting factors. The attack vector is local network only (AV:A), reducing real-world attack surface compared to remotely exploitable vulnerabilities. The high privilege requirement (PR:H) means only authenticated administrators can exploit this, significantly limiting threat actor accessibility. However, the EPSS probability and real-world risk depend on whether administrators have been compromised or whether an insider threat exists. The impact is binary for availability (A:H) - the device becomes unavailable - but with no confidentiality or integrity impact. For most organizations, this poses low to moderate risk unless the HiPER 1200GW is a critical infrastructure component in a high-security environment. The lack of any public proof-of-concept or KEV designation suggests this is not currently prioritized by threat actors, making it a secondary-tier remediation candidate compared to remote or unauthenticated vulnerabilities.

An authenticated administrator or insider with valid credentials logs into the UTT Aggressive HiPER 1200GW web interface or management console and submits a maliciously crafted ARP binding configuration request with an oversized payload in the pools parameter. The formArpBindConfig function fails to validate input length, causing a buffer overflow that corrupts stack memory and crashes the device process, resulting in a denial of service until the appliance is rebooted. No sophisticated attack infrastructure is required - a single HTTP POST or CLI command from an admin terminal is sufficient.