CVE-2026-4862highCWE-119CWE-120

CVE-2026-4862: falha de alta gravidade em UTT HiPER 1250GW

UTT HiPER 1250GW Parameter formConfigDnsFilterGlobal strcpy buffer overflow

Publicada em

Seguir esta CVE+ Monitorar HiPER 1250GW

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.5%
A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file /goform/formConfigDnsFilterGlobal of the component Parameter Handler. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
UTT · HiPER 1250GW
CVEs relacionadas — UTT HiPER 1250GW

No mesmo produto, das mais perigosas para as menos.

CVE-2026-18897HIGHUTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflowEPSS 0.8%CVE-2026-18895HIGHUTT HiPER 1250GW APSecurity_5g strcpy stack-based overflowEPSS 0.8%CVE-2026-78169CRITICALUTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy stack-based overflowEPSS 0.8%CVE-2026-76004CRITICALUTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflowEPSS 0.8%CVE-2026-14721HIGHUTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-based overflowEPSS 0.8%CVE-2026-7418HIGHUTT HiPER 1250GW NTP strcpy buffer overflowEPSS 0.6%