1200Gw Firmware CVE-2026-31063

The vulnerability is a classic stack-based buffer overflow (CWE-120: Buffer Copy without Checking Size of Input) in the pools parameter handler of the formArpBindConfig function within the UTT Aggressive HiPER 1200GW device firmware. The device is a network appliance, and the affected function likely processes ARP binding configuration parameters without proper input length validation. The buffer overflow occurs in a local network context (AV:A per CVSS vector), meaning the attacker must be on the same network segment or have already gained network access to the device. The high privilege requirement (PR:H) indicates the attacker must authenticate with administrative credentials to trigger the vulnerable code path.