Skip to main content

UTT HiPER 1200GW EUVDEUVD-2026-62222

| CVE-2026-76003 HIGH
Stack-based Buffer Overflow (CWE-121)
2026-08-19 VulDB GHSA-6rxv-jchw-qjv3
Stack Overflow Buffer Overflow Hiper 1200Gw
8.6
CVSS 4.0 · Vendor: VulDB
Share

Severity by source

Vendor (VulDB) PRIMARY
8.6 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
9.9 CRITICAL

Network-reachable endpoint requires low-privilege auth (PR:L); scope changes because gateway compromise affects downstream network (S:C).

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

6
Analysis Updated
Aug 19, 2026 - 03:31 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Aug 19, 2026 - 03:22 vuln.today
cvss_changed
Severity Changed
Aug 19, 2026 - 03:22 NVD
CRITICAL HIGH
CVSS changed
Aug 19, 2026 - 03:22 NVD
9.4 (CRITICAL) 8.6 (HIGH)
Analysis Generated
Aug 19, 2026 - 03:00 vuln.today
CVE Published
Aug 19, 2026 - 02:00 cve.org
CRITICAL 9.4

DescriptionCVE.org

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formGroupConfig. Executing a manipulation of the argument timestart can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

AnalysisAI

Stack-based buffer overflow in UTT HiPER 1200GW firmware through version 2.5.3-170306 enables remote code execution via a crafted timestart parameter submitted to the /goform/formGroupConfig endpoint. The root cause is an unbounded strcpy() call (CWE-121) in the formGroupConfig handler that overwrites stack memory without validating input length. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Recon
Obtain low-privilege device credentials
Delivery
Authenticate to web management interface
Exploit
POST oversized timestart to /goform/formGroupConfig
Install
Trigger strcpy stack buffer overflow
C2
Overwrite return address with controlled value
Execute
Execute arbitrary code as device process
Impact
Pivot to downstream network
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Low-privilege authenticated access to the UTT HiPER 1200GW web management interface is required, as indicated by PR:L in the CVSS 4.0 vector. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) and E:P threat metric confirm low-complexity, network-accessible exploitation by a low-privileged authenticated user with a working PoC. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who has obtained low-privilege credentials to the HiPER 1200GW web interface - for example, via default credentials or credential reuse - sends a crafted HTTP POST request to /goform/formGroupConfig with a timestart value significantly exceeding the expected buffer size. The strcpy() call copies the oversized input onto the stack, corrupting the return address of the handler function and redirecting execution to attacker-controlled shellcode or a ROP chain. …
Remediation No vendor-released patch has been identified at time of analysis; the fix version has not been confirmed from available data. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Conduct an urgent inventory of all deployed UTT HiPER 1200GW devices and identify which are running firmware version 2.5.3-170306 or earlier; isolate or air-gap any confirmed vulnerable instances from production networks if operationally feasible. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Hiper 1200Gw

View all
CVE-2026-18898 HIGH POC
7.4 Aug 05

Stack-based buffer overflow in UTT HiPER 1200GW firmware up to v2.5.3-170306 enables network-reachable authenticated att
CVE-2026-19341 HIGH POC
7.4 Aug 09

Stack-based buffer overflow in UTT HiPER 1200GW firmware (versions up to 2.5.3-170306) enables authenticated remote atta
CVE-2026-78170 HIGH POC
7.4 Aug 24

Remote buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows network-reachable authenticated

CVE-2026-10293 HIGH POC
7.4 Jun 01

Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows authenticated remote attack
CVE-2026-10292 HIGH POC
7.4 Jun 01

Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware versions up to 2.5.3-170306) allows remote authenticat
CVE-2026-6186 HIGH POC
7.4 Apr 13

Buffer overflow in UTT HiPER 1200GW router versions up to 2.5.3-170306 enables remote authenticated attackers to execute
CVE-2026-4487 HIGH POC
7.4 Mar 20

Unauthenticated attackers can trigger a buffer overflow in UTT HiPER 1200GW firmware versions up to 2.5.3-170306 via the

Same weakness CWE-121 – Stack-based Buffer Overflow

View all
CVE-2025-0282 CRITICAL POC
9.0
CVE-2025-22457 CRITICAL POC
9.8
CVE-2012-10060 CRITICAL POC
9.3
CVE-2012-10053 CRITICAL POC
9.3
CVE-2013-10064 CRITICAL POC
9.3
CVE-2012-10023 MEDIUM POC
6.9
CVE-2012-10058 CRITICAL POC
10.0
CVE-2013-10068 CRITICAL POC
9.4

Same technique Stack Overflow

View all
CVE-2025-0282 CRITICAL POC
9.0
CVE-2025-22457 CRITICAL POC
9.8
CVE-2012-10060 CRITICAL POC
9.3
CVE-2012-10053 CRITICAL POC
9.3
CVE-2013-10064 CRITICAL POC
9.3
CVE-2012-10023 MEDIUM POC
6.9
CVE-2012-10058 CRITICAL POC
10.0
CVE-2013-10068 CRITICAL POC
9.4

Share

EUVD-2026-62222 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy