CVE-2026-18897: fallo de gravedad alta en UTT HiPER 1250GW
UTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflow
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
41Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 8.7epss 0.8%
A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Productos afectados
UTT · HiPER 1250GWPoCs públicas encontradas — 1
cve_referencegithub.com/7wkajk/CVE-VUL/blob/main/102.mdno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — UTT HiPER 1250GW
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-18895HIGHUTT HiPER 1250GW APSecurity_5g strcpy stack-based overflowEPSS 0.8%CVE-2026-78169CRITICALUTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy stack-based overflowEPSS 0.8%CVE-2026-76004CRITICALUTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflowEPSS 0.8%CVE-2026-14721HIGHUTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-based overflowEPSS 0.8%CVE-2026-7418HIGHUTT HiPER 1250GW NTP strcpy buffer overflowEPSS 0.6%CVE-2026-7419HIGHUTT HiPER 1250GW formTaskEdit_ap strcpy buffer overflowEPSS 0.5%