EUVD-2026-19257
GHSA-rx8h-94vm-wff9
Severity by source
AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
3DescriptionCVE.org
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
AnalysisAI
Buffer overflow in UTT Aggressive HiPER 810G v3 v1.7.7-171114 ConfigAdvideo function allows authenticated local attackers with high privileges to cause denial of service by crafting malicious input to the timestart parameter. The vulnerability scores low-to-moderate risk (CVSS 4.5) due to strict prerequisites: network access limited to adjacent network only, high privilege requirement, and impact restricted to availability.
Technical ContextAI
This vulnerability is a classic stack-based or heap-based buffer overflow (CWE-120: Buffer Copy without Checking Size of Input) in a video configuration function of an IP surveillance appliance. The timestart parameter lacks input validation and boundary checking when processed by the ConfigAdvideo function. UTT Aggressive HiPER 810G v3 is a network video recorder/surveillance device; the vulnerability exists specifically in firmware version 1.7.7-171114. Attackers exploiting this would craft oversized or specially formatted input that overwrites adjacent memory, leading to process crash or device malfunction rather than code execution due to modern mitigations.
RemediationAI
Contact UTT or check the vendor support portal for a firmware update beyond version 1.7.7-171114. As patch version information is not provided in available references, confirm with the device manufacturer whether a fixed firmware release is available and proceed with upgrade following the vendor's documented firmware update procedure. Until a patch is available, restrict administrative access to the device configuration interface to trusted personnel only and monitor the adjacent network for suspicious configuration attempts. The GitHub link (https://github.com/zxq0408/Vul202601/blob/main/1.md) may contain proof-of-concept details but should not be considered a reliable remediation source; refer to official UTT channels for patches.
More in 810g Firmware
View allRemote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 allows authenticated attackers to achieve
Remote code execution in UTT HiPER 810G firmware versions up to 1.7.7-171114 allows authenticated attackers to achieve f
Buffer overflow in UTT HiPER 810G firmware versions up to 1.7.7-171114 allows authenticated remote attackers to achieve
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-1711 allows authenticated remote attackers to exe
Unauthenticated remote attackers can achieve complete system compromise through a buffer overflow in the UTT HiPER 810G
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-1711 via a buffer overflow in the /goform/formApM
Unauthenticated remote attackers can achieve complete system compromise (code execution, data theft, and denial of servi
Remote code execution in UTT HiPER 810G firmware up to version 1.7.7-171114 through a stack buffer overflow in the DNS f
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 stems from an unsafe strcpy operation in t
A buffer overflow in the NTP configuration handler of UTT HiPER 810G firmware versions up to 1.7.7-171114 enables authen
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 allows unauthenticated attackers to overfl
Buffer overflow in UTT HiPER 810G firmware versions up to 1.7.7-1711 allows remote attackers with high privileges to exe
Same weakness CWE-120 – Classic Buffer Overflow
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today