CVE-2026-18897: high-severity vulnerability in UTT HiPER 1250GW
UTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflow
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.7epss 0.8%
A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
UTT · HiPER 1250GWpublic PoCs found — 1
cve_referencegithub.com/7wkajk/CVE-VUL/blob/main/102.mdunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — UTT HiPER 1250GW
In the same product, most dangerous first.
CVE-2026-18895HIGHUTT HiPER 1250GW APSecurity_5g strcpy stack-based overflowEPSS 0.8%CVE-2026-78169CRITICALUTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy stack-based overflowEPSS 0.8%CVE-2026-76004CRITICALUTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflowEPSS 0.8%CVE-2026-14721HIGHUTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-based overflowEPSS 0.8%CVE-2026-7418HIGHUTT HiPER 1250GW NTP strcpy buffer overflowEPSS 0.6%CVE-2026-7419HIGHUTT HiPER 1250GW formTaskEdit_ap strcpy buffer overflowEPSS 0.5%