2620G Firmware
Monthly
Remote buffer overflow in UTT HiPER 2620G firmware up to 3.1.4 enables an attacker with a low-privilege authenticated session on the web management interface to corrupt memory via the /goform/fNTP NTPServerIP parameter, potentially achieving high confidentiality, integrity, and availability impact. Publicly available exploit code exists, but there is no confirmed active exploitation (CISA KEV) and the EPSS score is low at 0.75% (54th percentile). The vendor did not respond to the disclosure, and no vendor-released patch is identified in the provided data.
Remote buffer overflow in UTT HiPER 2620G firmware up to 3.1.4 enables an attacker with a low-privilege authenticated session on the web management interface to corrupt memory via the /goform/fNTP NTPServerIP parameter, potentially achieving high confidentiality, integrity, and availability impact. Publicly available exploit code exists, but there is no confirmed active exploitation (CISA KEV) and the EPSS score is low at 0.75% (54th percentile). The vendor did not respond to the disclosure, and no vendor-released patch is identified in the provided data.