810g Firmware CVE-2026-31066

CVSS score of 4.5 combined with attack vector adjacent network (AV:A) and high privilege requirement (PR:H) indicates this is a low-to-moderate real-world priority despite the buffer overflow designation. EPSS exploitation probability data is not available, but the attack complexity is low (AC:L) once authentication is obtained, and the impact is limited to availability (A:H) with no confidentiality or integrity consequences. The vulnerability requires an authenticated administrator on the local network segment-a significant barrier in typical enterprise or consumer deployments. This is not a critical remote code execution path; rather, it represents a malicious admin denial-of-service risk. Priority should be assigned based on organizational exposure to trusted administrative accounts and whether the UTT Aggressive HiPER 810G v3 is deployed in security-sensitive network segments where admin compromise is a material threat.

A malicious administrator with high-privilege credentials on the local network segment crafts a specially formatted HTTP or management protocol request to the formTaskEdit function with an oversized or malicious selDateType parameter value. The buffer overflow overwrites adjacent stack memory, causing the device firmware to crash or enter an unstable state, resulting in denial of service to legitimate users. While this requires admin-level access and network adjacency, it could be executed by a disgruntled employee or via compromised credentials; no public proof-of-concept exploit code has been identified at time of analysis.