إرسال #883902: UTT HiPER 1200GW <=v2.5.3-170306 Buffer Overflow

A serious buffer overflow vulnerability has been identified in the UTT Aggressive HiPER 1200GW router. The vulnerable endpoint is /goform/formConfigFastDirectionW, where insufficient bounds checking on user-supplied input allows an attacker to trigger a stack-based buffer overflow.

By sending a specially crafted HTTP request to /goform/formConfigFastDirectionW with an oversized value for a vulnerable parameter, an attacker can overflow a fixed-size buffer allocated on the stack. The root cause lies in the unsafe use of the strcpy function at strcpy((char *)(InstPointByIndex + 24), Var);. In this code, the destination buffer is located 24 bytes into a stack-resident structure referenced by InstPointByIndex, while the source Var is populated directly from attacker-controlled input without any length validation. When the supplied input exceeds the capacity of the destination buffer, the strcpy operation writes beyond the buffer boundary, corrupting adjacent stack memory—including critical control data such as saved return addresses and frame pointers.

• المصدر: ⚠️ https://github.com/7wkajk/CVE-VUL/blob/main/108.md
• المستخدم: yecp (UID 95483)
• ارسال: 09/07/2026 09:03 AM (2 أشهر منذ)
• الاعتدال: 23/08/2026 04:20 PM (2 months later)
• الحالة: تمت الموافقة
• إدخال VulDB: 394559 [UTT HiPER 1200GW حتى 2.5.3-170306 formConfigFastDirectionW strcpy ssid تلف الذاكرة]
• النقاط: 20