Which versions of UTT HiPER 1250GW are affected by EUVD-2026-41734?

The UTT HiPER 1250GW SOHO router contains a vulnerability with publicly available exploit code that allows authenticated users to crash the device or gain unauthorized control of network…

Is there a public PoC exploit available for EUVD-2026-41734?

Yes, a public proof-of-concept exploit is available for EUVD-2026-41734. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate EUVD-2026-41734?

Within 24 hours: Inventory all UTT HiPER 1250GW deployments and verify firmware versions through 3.2.7-210907-180535 are in use; immediately restrict web management interface access to defined trusted administrative networks via firewall rules and access controls. Within 7 days: Implement network segmentation to isolate the router from general user networks; disable remote management, web-based administration, and UPnP features on all affected devices. Within 30 days: Evaluate replacement with routers from vendors with active patch management; develop transition plan or establish enhanced monitoring if devices must remain in production.

UTT HiPER 1250GW EUVD-2026-41734

Q: What is the CVSS score of EUVD-2026-41734?

EUVD-2026-41734 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

| CVE-2026-14721 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-07-05 VulDB

GHSA-497j-pwp3-mjvj

Buffer Overflow Stack Overflow Hiper 1250Gw Utt

7.4

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

Network-reachable web endpoint with low-complexity overflow; PR:L reflects expected web-UI authentication; stack overflow yields high C/I/A on the device with no scope change.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 05, 2026 - 08:31 vuln.today

CVSS changed

Jul 05, 2026 - 08:22 NVD

8.7 (HIGH) 7.4 (HIGH)

DescriptionCVE.org

A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an unknown function of the file /goform/ConfigWirelessBase_5g of the component Web Endpoint. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

Stack-based buffer overflow in the UTT HiPER 1250GW SOHO router (firmware through 3.2.7-210907-180535) lets a network-adjacent attacker corrupt memory by supplying an oversized 'ssid' argument to the /goform/ConfigWirelessBase_5g web handler, potentially achieving code execution or a device crash. The flaw is remotely reachable via the device's web management interface and carries a CVSS 4.0 base score of 7.4 (PR:L, indicating some authentication to the web UI is expected). Publicly available exploit code exists (disclosed via VulDB and a GitHub PoC), though there is no public exploit identified as being actively used in the wild.

Technical ContextAI

The affected component is the embedded HTTP management server exposed by UTT HiPER-series gateway/router firmware, which handles configuration form submissions under /goform/ endpoints. The ConfigWirelessBase_5g handler processes the 5 GHz wireless base configuration, and the 'ssid' parameter is copied into a fixed-size stack buffer without adequate bounds checking - the classic CWE-121 (Stack-based Buffer Overflow) root cause. On memory-constrained MIPS/ARM embedded devices like this, such handlers are typically written in C with unchecked strcpy/sprintf-style operations, so an overlong SSID string overwrites the saved return address on the call stack. CPE cpe:2.3:a:utt:hiper_1250gw:*:*:*:*:*:*:*:* confirms the UTT HiPER 1250GW product line as the affected target across all firmware revisions up to the listed build.

RemediationAI

No vendor-released patch identified at time of analysis, and no fixed firmware version is cited in the available data - check the UTT vendor portal for an updated HiPER 1250GW firmware release superseding 3.2.7-210907-180535 and apply it once available. As compensating controls until a patch exists: disable remote/WAN-side access to the web management interface so /goform/ endpoints are not internet-reachable (trade-off: administrators lose remote management convenience); restrict access to the LAN-side management UI to a dedicated management VLAN or specific admin IP addresses via ACL (trade-off: adds configuration overhead); and enforce strong, unique administrative credentials with account lockout since the CVSS vector indicates PR:L authentication is in play (trade-off: none significant). Monitor the VulDB advisory (https://vuldb.com/vuln/376308) for a confirmed fix version before assuming remediation.