EUVD-2026-33816
GHSA-v9p3-mv8f-2rq8
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
5DescriptionCVE.org
A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/formFireWall. This manipulation of the argument Profile causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
AnalysisAI
Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows authenticated remote attackers to corrupt memory via the Profile parameter in the /goform/formFireWall endpoint, where unsafe strcpy usage processes the input. Publicly available exploit code exists, increasing the realistic risk of attempted compromise against exposed management interfaces. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires (1) network reachability to the router's HTTP administration interface, typically the LAN side by default but the WAN side if remote management is enabled, and (2) valid authenticated access at admin/operator level (CVSS PR:L) sufficient to reach the /goform/formFireWall handler. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are mixed and moderate. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has obtained or guessed valid administrator credentials (e.g., default creds, phishing, or credential reuse) sends a crafted HTTP POST to /goform/formFireWall with an oversized Profile parameter; the strcpy overflows the stack and overwrites the return address, redirecting execution to attacker-supplied shellcode or a ROP chain. The published PoC at github.com/yuezhaoshanmu/cve lowers the barrier to weaponization, enabling persistent backdoor installation on the router for traffic interception or pivoting into the LAN. |
| Remediation | No vendor-released patch identified at time of analysis - UTT has not published an advisory or fixed firmware version in the references provided, so defenders should monitor https://www.utt.com.cn for firmware later than 2.5.3-170306. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
24 hours: Identify all UTT HiPER 1200GW routers running firmware version 2.5.3-170306 or earlier; immediately restrict administrative interface access to whitelisted IP addresses of authorized administrators only; require strong, unique administrative credentials with immediate password changes. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today