CVE-2026-18895: falha de alta gravidade em UTT HiPER 1250GW
UTT HiPER 1250GW APSecurity_5g strcpy stack-based overflow
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
41Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 8.7epss 0.8%
A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
UTT · HiPER 1250GWPoCs públicas encontradas — 1
cve_referencegithub.com/7wkajk/CVE-VUL/blob/main/101.mdnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — UTT HiPER 1250GW
No mesmo produto, das mais perigosas para as menos.
CVE-2026-18897HIGHUTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflowEPSS 0.8%CVE-2026-78169CRITICALUTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy stack-based overflowEPSS 0.8%CVE-2026-76004CRITICALUTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflowEPSS 0.8%CVE-2026-14721HIGHUTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-based overflowEPSS 0.8%CVE-2026-7418HIGHUTT HiPER 1250GW NTP strcpy buffer overflowEPSS 0.6%CVE-2026-7419HIGHUTT HiPER 1250GW formTaskEdit_ap strcpy buffer overflowEPSS 0.5%