Skip to main content

UTT HiPER 1200GW EUVDEUVD-2026-64692

| CVE-2026-78170 HIGH
Classic Buffer Overflow (CWE-120)
2026-08-24 VulDB GHSA-j7vq-hghc-6ppc
Buffer Overflow Hiper 1200Gw
7.4
CVSS 4.0 · Vendor: VulDB
Share

Severity by source

Vendor (VulDB) PRIMARY
7.4 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
8.8 HIGH

Network-reachable web interface requires low-privilege credentials (PR:L per CVSS 4.0 source); no special configuration needed; full device impact but no confirmed scope change to downstream systems.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

3
Analysis Generated
Aug 24, 2026 - 02:30 vuln.today
CVSS changed
Aug 24, 2026 - 02:22 NVD
8.7 (HIGH) 7.4 (HIGH)
CVE Published
Aug 24, 2026 - 02:00 cve.org
HIGH 7.4

DescriptionCVE.org

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

AnalysisAI

Remote buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows network-reachable authenticated attackers to corrupt memory by supplying an oversized SSID value to the /goform/formConfigFastDirectionW endpoint, which calls strcpy without bounds checking on user input. Full confidentiality, integrity, and availability impact on the device is possible, potentially enabling arbitrary code execution and pivoting into the network behind the gateway. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain valid management credentials
Delivery
Access web GUI at /goform/formConfigFastDirectionW
Exploit
Submit POST with oversized SSID parameter
Execution
Trigger strcpy stack buffer overflow
Persist
Overwrite return address with attacker payload
Impact
Execute arbitrary code as privileged process on device
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The attacker must have network reachability to the UTT HiPER 1200GW web management interface (TCP port 80 or 443 depending on configuration) and must possess valid management credentials sufficient for at least low-privilege access to the device - consistent with CVSS 4.0 PR:L. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H) scores 7.4, reflecting low attack complexity and full device impact tempered by a low-privilege authentication requirement (PR:L). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with valid management credentials - obtained via default credential reuse, brute force, or insider access - sends a crafted HTTP POST request to /goform/formConfigFastDirectionW containing an SSID value significantly longer than the receiving buffer. The strcpy call copies the full input without truncation, overwriting adjacent stack memory including the return address. …
Remediation No vendor-released patch has been identified at time of analysis for any firmware version of UTT HiPER 1200GW. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Inventory all UTT HiPER 1200GW routers currently deployed and identify internet-facing or untrusted-network-accessible instances; immediately implement firewall rules restricting administrative authentication to verified trusted IP addresses only. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Hiper 1200Gw

View all
CVE-2026-76003 HIGH POC
8.6 Aug 19

Stack-based buffer overflow in UTT HiPER 1200GW firmware through version 2.5.3-170306 enables remote code execution via

CVE-2026-18898 HIGH POC
7.4 Aug 05

Stack-based buffer overflow in UTT HiPER 1200GW firmware up to v2.5.3-170306 enables network-reachable authenticated att
CVE-2026-19341 HIGH POC
7.4 Aug 09

Stack-based buffer overflow in UTT HiPER 1200GW firmware (versions up to 2.5.3-170306) enables authenticated remote atta
CVE-2026-10293 HIGH POC
7.4 Jun 01

Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware up to 2.5.3-170306) allows authenticated remote attack
CVE-2026-10292 HIGH POC
7.4 Jun 01

Stack-based buffer overflow in UTT HiPER 1200GW routers (firmware versions up to 2.5.3-170306) allows remote authenticat
CVE-2026-6186 HIGH POC
7.4 Apr 13

Buffer overflow in UTT HiPER 1200GW router versions up to 2.5.3-170306 enables remote authenticated attackers to execute
CVE-2026-4487 HIGH POC
7.4 Mar 20

Unauthenticated attackers can trigger a buffer overflow in UTT HiPER 1200GW firmware versions up to 2.5.3-170306 via the

Same weakness CWE-120 – Classic Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2019-11043 CRITICAL POC
9.8
CVE-2016-10174 CRITICAL POC
9.8
CVE-2016-0099 HIGH POC
7.8
CVE-2016-6366 HIGH POC
8.8
CVE-2013-1331 HIGH
7.8
CVE-2013-0641 HIGH
7.8
CVE-2017-15222 CRITICAL POC
9.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Share

EUVD-2026-64692 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy