Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Buffer copy size validation
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | CVSS score of 4.5 combined with attack vector adjacent network (AV:A) and high privilege requirement (PR:H) indicates this is a low-to-moderate real-world priority despite the buffer overflow designation. EPSS exploitation probability data is not available, but the attack complexity is low (AC:L) once authentication is obtained, and the impact is limited to availability (A:H) with no confidentiality or integrity consequences. The vulnerability requires an authenticated administrator on the local network segment-a significant barrier in typical enterprise or consumer deployments. This is not a critical remote code execution path; rather, it represents a malicious admin denial-of-service risk. Priority should be assigned based on organizational exposure to trusted administrative accounts and whether the UTT Aggressive HiPER 810G v3 is deployed in security-sensitive network segments where admin compromise is a material threat. |
| Exploit ScenarioDerived | A malicious administrator with high-privilege credentials on the local network segment crafts a specially formatted HTTP or management protocol request to the formTaskEdit function with an oversized or malicious selDateType parameter value. The buffer overflow overwrites adjacent stack memory, causing the device firmware to crash or enter an unstable state, resulting in denial of service to legitimate users. While this requires admin-level access and network adjacency, it could be executed by a disgruntled employee or via compromised credentials; no public proof-of-concept exploit code has been identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 06, 2026
Buffer overflow in UTT Aggressive HiPER 810G v3 v1.7.7-171114 formTaskEdit function allows authenticated administrators to cause denial of service through a malformed selDateType parameter. The vulnerability is a classic stack-based buffer overflow (CWE-120) requiring high-privilege local network access; no public exploitation framework has been identified, and CVSS 4.5 reflects the limited scope (DoS only, no code execution or information disclosure).
RemediationAI
Contact UTT or check the device manufacturer's support portal for a patched firmware version addressing CVE-2026-31066. No specific patched version number is provided in available data, so obtain the latest stable firmware release for the UTT Aggressive HiPER 810G v3 and verify the security advisory references (https://nvd.nist.gov/vuln/detail/CVE-2026-31066 and https://github.com/zxq0408/Vul202601/blob/main/6.md) for confirmation of fix status. As an interim mitigation, restrict administrative access to the device to trusted accounts only and segment the network to minimize exposure to users who do not require administrative privileges. If firmware patching is delayed, monitor device logs for unexpected restarts or availability issues that may indicate exploitation attempts.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability exists in the formTaskEdit function of UTT Aggressive HiPER 810G v3 firmware v1.7.7-171114, specifically in parameter handling for the selDateType input. The root cause is CWE-120 (Classic Buffer Overflow / Stack-based Buffer Overflow), a memory safety issue where user-supplied input to the selDateType parameter is copied into a fixed-size buffer without proper bounds checking. This is a traditional memory corruption flaw commonly found in embedded device firmware written in C/C++ without modern compiler protections. The attack vector is adjacent (AV:A), indicating the attacker must have network access to the same local segment as the device; the CVSS vector PR:H confirms only high-privilege users (administrative accounts) can trigger the vulnerability, significantly limiting its real-world exploitation scope.
Know when 810g Firmware gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
DescriptionCVE.org
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of the formTaskEdit function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Threat Intelligence Overview
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Related Vulnerabilities in UTT Aggressive Buffer Overflow Vulnerabilities
View all 7More in 810g Firmware
View allRemote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 allows authenticated attackers to achieve
Remote code execution in UTT HiPER 810G firmware versions up to 1.7.7-171114 allows authenticated attackers to achieve f
Buffer overflow in UTT HiPER 810G firmware versions up to 1.7.7-171114 allows authenticated remote attackers to achieve
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-1711 allows authenticated remote attackers to exe
Unauthenticated remote attackers can achieve complete system compromise through a buffer overflow in the UTT HiPER 810G
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-1711 via a buffer overflow in the /goform/formApM
Unauthenticated remote attackers can achieve complete system compromise (code execution, data theft, and denial of servi
Remote code execution in UTT HiPER 810G firmware up to version 1.7.7-171114 through a stack buffer overflow in the DNS f
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 stems from an unsafe strcpy operation in t
A buffer overflow in the NTP configuration handler of UTT HiPER 810G firmware versions up to 1.7.7-171114 enables authen
Remote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 allows unauthenticated attackers to overfl
Buffer overflow in UTT HiPER 810G firmware versions up to 1.7.7-1711 allows remote attackers with high privileges to exe
EUVD-2026-19265
GHSA-2pm6-rcw9-992f
NVD
CVE.org
EPSS
Vulnrichment
Exploit-DB