Skip to main content

UTT HiPER 1250GW CVE-2026-78169

| EUVDEUVD-2026-64691 HIGH
Stack-based Buffer Overflow (CWE-121)
2026-08-24 VulDB GHSA-5mxf-p48r-2xxm
Stack Overflow Buffer Overflow Hiper 1250Gw
8.6
CVSS 4.0 · Vendor: VulDB
Share

Severity by source

Vendor (VulDB) PRIMARY
8.6 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
9.9 CRITICAL

Network-accessible HTTP endpoint requires low-privileged auth (PR:L); scope change (S:C) reflects gateway appliance impact on downstream network segments.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

4
Analysis Generated
Aug 24, 2026 - 02:30 vuln.today
Severity Changed
Aug 24, 2026 - 02:22 NVD
CRITICAL HIGH
CVSS changed
Aug 24, 2026 - 02:22 NVD
9.4 (CRITICAL) 8.6 (HIGH)
CVE Published
Aug 24, 2026 - 01:45 cve.org
HIGH 8.6

DescriptionCVE.org

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.

AnalysisAI

Stack-based buffer overflow in UTT HiPER 1250GW firmware (≤ 3.2.7-210907-180535) exposes the device to remote code execution via a crafted HTTP request to the /goform/aspRemoteApConfTempSend endpoint. The unsafe strcpy() call processing the Profile parameter allows a low-privileged remote attacker to overwrite stack memory, with full confidentiality, integrity, and availability impact on both the device and downstream network systems per the CVSS 4.0 subsequent-system metrics. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Identify internet-exposed UTT HiPER 1250GW
Delivery
Authenticate with low-privilege credentials
Exploit
Craft oversized Profile parameter payload
Execution
POST to /goform/aspRemoteApConfTempSend
Persist
Trigger strcpy stack overflow
Impact
Execute arbitrary code on firmware
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The CVSS 4.0 vector specifies PR:L, meaning the attacker must hold at least a low-privileged authenticated session on the device's HTTP management interface before triggering the overflow. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 8.6 with base metrics AV:N/AC:L/AT:N/PR:L/UI:N reflects a network-reachable, low-complexity attack requiring only low-privileged credentials. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with low-privileged credentials - obtained via default password lists or credential reuse common in SMB environments - authenticates to the UTT HiPER 1250GW HTTP management interface and submits a POST request to `/goform/aspRemoteApConfTempSend` with an oversized `Profile` parameter value crafted to overwrite the return address on the stack. Using the publicly available proof-of-concept on GitHub as a template, the attacker achieves arbitrary code execution as the firmware process, enabling persistent backdoor installation, traffic interception, or lateral movement into connected network segments.
Remediation No vendor-released patch has been identified in the available data at time of analysis; operators should monitor UTT's official support channels for a firmware update addressing this issue (reference: https://vuldb.com/vuln/394558). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, identify all UTT HiPER 1250GW devices on the network using asset management and network scanning tools, verify firmware versions, and assess their exposure to untrusted network segments. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Hiper 1250Gw

View all
CVE-2026-76004 HIGH POC
8.6 Aug 19

Stack-based buffer overflow in UTT HiPER 1250GW firmware (versions through 3.2.7-210907-180535) allows remote, low-privi
CVE-2026-18897 HIGH POC
7.4 Aug 05

Stack-based buffer overflow in the UTT HiPER 1250GW firmware (all versions up to v3.2.7-210907-180535) allows authentica
CVE-2026-18895 HIGH POC
7.4 Aug 05

Stack-based buffer overflow in UTT HiPER 1250GW firmware (all versions through 3.2.7-210907-180535) enables low-privileg
CVE-2026-14721 HIGH POC
7.4 Jul 05

Stack-based buffer overflow in the UTT HiPER 1250GW SOHO router (firmware through 3.2.7-210907-180535) lets a network-ad
CVE-2026-7420 HIGH POC
7.4 Apr 29

Remote code execution risk in the UTT HiPER 1250GW router (firmware up to 3.2.7-210907-180535) stems from an unbounded s
CVE-2026-7419 HIGH POC
7.4 Apr 29

Stack buffer overflow in the UTT HiPER 1250GW gateway/router (firmware up to 3.2.7-210907-180535) lets a low-privileged

CVE-2026-7418 HIGH POC
7.4 Apr 29

Stack buffer overflow in the UTT HiPER 1250GW enterprise router (firmware up to 3.2.7-210907-180535) allows an authentic
CVE-2026-5566 HIGH POC
7.4 Apr 05

Buffer overflow in UTT HiPER 1250GW router firmware (versions ≤3.2.7-210907-180535) allows authenticated remote attacker
CVE-2026-5544 HIGH POC
7.4 Apr 05

Stack-based buffer overflow in UTT HiPER 1250GW router (versions up to 3.2.7-210907-180535) allows authenticated remote

CVE-2026-4862 HIGH POC
7.4 Mar 26

Buffer overflow in UTT HiPER 1250GW firmware versions up to 3.2.7-210907-180535 allows authenticated remote attackers to
CVE-2026-4488 HIGH POC
7.4 Mar 20

Remote code execution in UTT HiPER 1250GW firmware versions up to 3.2.7 allows authenticated attackers to overflow a buf

Same weakness CWE-121 – Stack-based Buffer Overflow

View all
CVE-2025-0282 CRITICAL POC
9.0
CVE-2025-22457 CRITICAL POC
9.8
CVE-2012-10060 CRITICAL POC
9.3
CVE-2012-10053 CRITICAL POC
9.3
CVE-2013-10064 CRITICAL POC
9.3
CVE-2012-10023 MEDIUM POC
6.9
CVE-2012-10058 CRITICAL POC
10.0
CVE-2013-10068 CRITICAL POC
9.4

Same technique Stack Overflow

View all
CVE-2025-0282 CRITICAL POC
9.0
CVE-2025-22457 CRITICAL POC
9.8
CVE-2012-10060 CRITICAL POC
9.3
CVE-2012-10053 CRITICAL POC
9.3
CVE-2013-10064 CRITICAL POC
9.3
CVE-2012-10023 MEDIUM POC
6.9
CVE-2012-10058 CRITICAL POC
10.0
CVE-2013-10068 CRITICAL POC
9.4

Share

CVE-2026-78169 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy