| Titre | UTT HiPER 1250GW <= v3.2.7-210907-180535 Buffer Overflow |
|---|
| Description | UTT HiPER 1250GW router firmware <= v3.2.7-210907-180535 contains a stack-based buffer overflow in the /goform/formRemoteControl handler. The vulnerability is caused by unsafe use of strcpy when processing the Profile parameter, which is fully controllable by an authenticated user. By submitting an excessively long Profile value, an attacker can overwrite memory and crash the device, resulting in denial of service. |
|---|
| La source | ⚠️ https://github.com/jinxjinxboom/cve/issues/1 |
|---|
| Utilisateur | cosy (UID 96606) |
|---|
| Soumission | 18/03/2026 13:29 (il y a 7 mois) |
|---|
| Modérer | 04/04/2026 08:56 (17 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 355297 [UTT HiPER 1250GW jusqu’à 3.2.7-210907-180535 formRemoteControl Profile buffer overflow] |
|---|
| Points | 20 |
|---|