Skip to main content

UTT HiPER 1250GW EUVDEUVD-2026-53022

| CVE-2026-18897 HIGH
Stack-based Buffer Overflow (CWE-121)
2026-08-05 VulDB GHSA-74mg-chvx-67jh
Buffer Overflow Stack Overflow Hiper 1250Gw
7.4
CVSS 4.0 · Vendor: VulDB
Share

Severity by source

Vendor (VulDB) PRIMARY
7.4 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
8.8 HIGH

Network-reachable web endpoint requires low-privilege authentication (PR:L); no scope change as all impact is confined to the vulnerable device itself.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

3
Analysis Generated
Aug 05, 2026 - 02:28 vuln.today
CVSS changed
Aug 05, 2026 - 02:22 NVD
8.7 (HIGH) 7.4 (HIGH)
CVE Published
Aug 05, 2026 - 02:00 cve.org
HIGH 7.4

DescriptionCVE.org

A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Stack-based buffer overflow in the UTT HiPER 1250GW firmware (all versions up to v3.2.7-210907-180535) allows authenticated remote attackers to corrupt stack memory via the tempName argument of the /goform/getOneApConfTempEntry endpoint, with potential for arbitrary code execution on the device. A public proof-of-concept exploit is available on GitHub, and the vendor did not respond to coordinated disclosure, leaving no patch path available. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain low-privilege management credentials
Delivery
Send HTTP request to /goform/getOneApConfTempEntry
Exploit
Supply oversized tempName argument
Execution
Trigger strcpy stack buffer overflow
Persist
Overwrite saved return address
Impact
Execute arbitrary code on device
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires authenticated access to the UTT HiPER 1250GW web management interface, as confirmed by PR:L in the CVSS 4.0 vector - an attacker must hold valid credentials or have hijacked an authenticated session before reaching the vulnerable endpoint. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 base vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) yields a score of 7.4, reflecting a network-reachable, low-complexity attack path constrained only by a low-privilege authentication requirement. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with low-privilege credentials to the HiPER 1250GW management interface - obtained via default credentials, credential stuffing, or prior compromise - sends a crafted HTTP POST to /goform/getOneApConfTempEntry with a tempName value exceeding the stack buffer size. The unsafe strcpy call overwrites the return address with attacker-controlled data; when the function returns, execution is redirected to attacker-supplied code or a ROP chain. …
Remediation No vendor-released patch has been identified at the time of analysis; the vendor did not respond to disclosure and no fixed firmware version is known. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, audit network access logs for exploitation attempts against UTT HiPER 1250GW management interfaces (default ports 80/443) and identify any exposed endpoints. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Hiper 1250Gw

View all
CVE-2026-78169 HIGH POC
8.6 Aug 24

Stack-based buffer overflow in UTT HiPER 1250GW firmware (≤ 3.2.7-210907-180535) exposes the device to remote code execu
CVE-2026-76004 HIGH POC
8.6 Aug 19

Stack-based buffer overflow in UTT HiPER 1250GW firmware (versions through 3.2.7-210907-180535) allows remote, low-privi
CVE-2026-18895 HIGH POC
7.4 Aug 05

Stack-based buffer overflow in UTT HiPER 1250GW firmware (all versions through 3.2.7-210907-180535) enables low-privileg
CVE-2026-14721 HIGH POC
7.4 Jul 05

Stack-based buffer overflow in the UTT HiPER 1250GW SOHO router (firmware through 3.2.7-210907-180535) lets a network-ad
CVE-2026-7420 HIGH POC
7.4 Apr 29

Remote code execution risk in the UTT HiPER 1250GW router (firmware up to 3.2.7-210907-180535) stems from an unbounded s
CVE-2026-7419 HIGH POC
7.4 Apr 29

Stack buffer overflow in the UTT HiPER 1250GW gateway/router (firmware up to 3.2.7-210907-180535) lets a low-privileged

CVE-2026-7418 HIGH POC
7.4 Apr 29

Stack buffer overflow in the UTT HiPER 1250GW enterprise router (firmware up to 3.2.7-210907-180535) allows an authentic
CVE-2026-5566 HIGH POC
7.4 Apr 05

Buffer overflow in UTT HiPER 1250GW router firmware (versions ≤3.2.7-210907-180535) allows authenticated remote attacker
CVE-2026-5544 HIGH POC
7.4 Apr 05

Stack-based buffer overflow in UTT HiPER 1250GW router (versions up to 3.2.7-210907-180535) allows authenticated remote

CVE-2026-4862 HIGH POC
7.4 Mar 26

Buffer overflow in UTT HiPER 1250GW firmware versions up to 3.2.7-210907-180535 allows authenticated remote attackers to
CVE-2026-4488 HIGH POC
7.4 Mar 20

Remote code execution in UTT HiPER 1250GW firmware versions up to 3.2.7 allows authenticated attackers to overflow a buf

Same weakness CWE-121 – Stack-based Buffer Overflow

View all
CVE-2025-0282 CRITICAL POC
9.0
CVE-2025-22457 CRITICAL POC
9.8
CVE-2012-10060 CRITICAL POC
9.3
CVE-2012-10053 CRITICAL POC
9.3
CVE-2013-10064 CRITICAL POC
9.3
CVE-2012-10023 MEDIUM POC
6.9
CVE-2012-10058 CRITICAL POC
10.0
CVE-2013-10068 CRITICAL POC
9.4

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Share

EUVD-2026-53022 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy