Skip to main content

UTT HiPER 1250GW EUVDEUVD-2026-62223

| CVE-2026-76004 HIGH
Stack-based Buffer Overflow (CWE-121)
2026-08-19 VulDB GHSA-jcc9-hpv7-rgf8
Stack Overflow Buffer Overflow Hiper 1250Gw
8.6
CVSS 4.0 · Vendor: VulDB
Share

Severity by source

Vendor (VulDB) PRIMARY
8.6 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
9.9 CRITICAL

Network-exploitable with low-privilege auth (PR:L); scope changed (S:C) because a compromised gateway can intercept and manipulate traffic affecting downstream connected systems.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

6
Analysis Updated
Aug 19, 2026 - 03:29 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Aug 19, 2026 - 03:22 vuln.today
cvss_changed
Severity Changed
Aug 19, 2026 - 03:22 NVD
CRITICAL HIGH
CVSS changed
Aug 19, 2026 - 03:22 NVD
9.4 (CRITICAL) 8.6 (HIGH)
Analysis Generated
Aug 19, 2026 - 03:01 vuln.today
CVE Published
Aug 19, 2026 - 02:15 cve.org
CRITICAL 9.4

DescriptionCVE.org

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argument pvid leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

AnalysisAI

Stack-based buffer overflow in UTT HiPER 1250GW firmware (versions through 3.2.7-210907-180535) allows remote, low-privilege authenticated attackers to execute arbitrary code by submitting an oversized pvid argument to the /goform/aspApBasicConfigUrcp HTTP handler endpoint. The vulnerable strcpy() call performs no bounds checking, enabling stack memory corruption including return address overwrite. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Recon
Identify HiPER 1250GW management interface exposed on network
Delivery
Obtain or brute-force low-privilege device credentials
Exploit
Submit crafted HTTP POST to /goform/aspApBasicConfigUrcp with oversized pvid value
Install
strcpy() overflows stack buffer, corrupting return address
C2
Redirect execution to attacker-controlled payload
Execute
Achieve arbitrary code execution as privileged firmware process
Impact
Control gateway and intercept or manipulate transiting network traffic
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires network-level access to the device's HTTP management interface and a valid low-privilege authenticated session (PR:L per CVSS 4.0). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) characterizes this as a network-exploitable, low-complexity flaw requiring only low-privilege authentication - a significant but not insurmountable barrier for targeted exploitation, especially given that SOHO and SMB gateway appliances frequently ship with default or weak credentials. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who has obtained or brute-forced low-privilege credentials for the UTT HiPER 1250GW management interface sends a crafted HTTP POST request to /goform/aspApBasicConfigUrcp with an abnormally long pvid parameter value. The device firmware's strcpy() call copies this value into a fixed stack buffer without length validation, overflowing it and overwriting the saved return address with attacker-controlled data. …
Remediation No vendor-released patch has been identified at the time of analysis - no fixed firmware version is confirmed in the available references, including VulDB (https://vuldb.com/vuln/391920) or ENISA EUVD-2026-62223. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, inventory all UTT HiPER 1250GW devices and confirm affected firmware versions through 3.2.7-210907-180535, restrict gateway administrative access to isolated internal management networks, and enable comprehensive audit logging of all authentication activity. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Hiper 1250Gw

View all
CVE-2026-78169 HIGH POC
8.6 Aug 24

Stack-based buffer overflow in UTT HiPER 1250GW firmware (≤ 3.2.7-210907-180535) exposes the device to remote code execu
CVE-2026-18897 HIGH POC
7.4 Aug 05

Stack-based buffer overflow in the UTT HiPER 1250GW firmware (all versions up to v3.2.7-210907-180535) allows authentica
CVE-2026-18895 HIGH POC
7.4 Aug 05

Stack-based buffer overflow in UTT HiPER 1250GW firmware (all versions through 3.2.7-210907-180535) enables low-privileg
CVE-2026-14721 HIGH POC
7.4 Jul 05

Stack-based buffer overflow in the UTT HiPER 1250GW SOHO router (firmware through 3.2.7-210907-180535) lets a network-ad
CVE-2026-7420 HIGH POC
7.4 Apr 29

Remote code execution risk in the UTT HiPER 1250GW router (firmware up to 3.2.7-210907-180535) stems from an unbounded s
CVE-2026-7419 HIGH POC
7.4 Apr 29

Stack buffer overflow in the UTT HiPER 1250GW gateway/router (firmware up to 3.2.7-210907-180535) lets a low-privileged

CVE-2026-7418 HIGH POC
7.4 Apr 29

Stack buffer overflow in the UTT HiPER 1250GW enterprise router (firmware up to 3.2.7-210907-180535) allows an authentic
CVE-2026-5566 HIGH POC
7.4 Apr 05

Buffer overflow in UTT HiPER 1250GW router firmware (versions ≤3.2.7-210907-180535) allows authenticated remote attacker
CVE-2026-5544 HIGH POC
7.4 Apr 05

Stack-based buffer overflow in UTT HiPER 1250GW router (versions up to 3.2.7-210907-180535) allows authenticated remote

CVE-2026-4862 HIGH POC
7.4 Mar 26

Buffer overflow in UTT HiPER 1250GW firmware versions up to 3.2.7-210907-180535 allows authenticated remote attackers to
CVE-2026-4488 HIGH POC
7.4 Mar 20

Remote code execution in UTT HiPER 1250GW firmware versions up to 3.2.7 allows authenticated attackers to overflow a buf

Same weakness CWE-121 – Stack-based Buffer Overflow

View all
CVE-2025-0282 CRITICAL POC
9.0
CVE-2025-22457 CRITICAL POC
9.8
CVE-2012-10060 CRITICAL POC
9.3
CVE-2012-10053 CRITICAL POC
9.3
CVE-2013-10064 CRITICAL POC
9.3
CVE-2012-10023 MEDIUM POC
6.9
CVE-2012-10058 CRITICAL POC
10.0
CVE-2013-10068 CRITICAL POC
9.4

Same technique Stack Overflow

View all
CVE-2025-0282 CRITICAL POC
9.0
CVE-2025-22457 CRITICAL POC
9.8
CVE-2012-10060 CRITICAL POC
9.3
CVE-2012-10053 CRITICAL POC
9.3
CVE-2013-10064 CRITICAL POC
9.3
CVE-2012-10023 MEDIUM POC
6.9
CVE-2012-10058 CRITICAL POC
10.0
CVE-2013-10068 CRITICAL POC
9.4

Share

EUVD-2026-62223 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy