CVE-2026-9631

UTT HiPER 1250GW Web Management formConfigFastDirectionW strcpy stack-based overflow

CVSS 8.7 HIGHEPSS 0.4%CWE-119 CWE-121

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/formConfigFastDirectionW of the component Web Management Interface. Performing a manipulation of the argument Profile results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is now public and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Affected products

UTT · HiPER 1250GW

public PoCs found — 1

cve_referencegithub.com/zhouguobing-maker/cve/blob/main/11.mdunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/zhouguobing-maker/cve/blob/main/11.md https://vuldb.com/submit/818375 https://vuldb.com/vuln/365740 https://vuldb.com/vuln/365740/cti