CVE-2026-9632

UTT HiPER 1250GW Web Management formGroupConfig strcpy stack-based overflow

CVSS 8.7 HIGHEPSS 0.5%CWE-119 CWE-121

A flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this issue is the function strcpy of the file /goform/formGroupConfig of the component Web Management Interface. Executing a manipulation of the argument Profile can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Affected products

UTT · HiPER 1250GW

public PoCs found — 1

cve_referencegithub.com/luozhibo-sec/cve/blob/main/12.mdunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/luozhibo-sec/cve/blob/main/12.md https://vuldb.com/submit/818383 https://vuldb.com/vuln/365741 https://vuldb.com/vuln/365741/cti