| शीर्षक | UTT HiPER 1250GW <=v2.5.3-170306 Buffer Overflow |
|---|
| विवरण | A serious buffer overflow vulnerability has been identified in the UTT HiPER 1250GW router. The vulnerability exists in the /goform/formFireWall endpoint, where improper input validation allows an attacker to trigger a stack-based buffer overflow by manipulating the Profile parameter.
By sending a specially crafted HTTP request to /goform/formFireWall containing an oversized value in the Profile parameter, an attacker can overflow a fixed-size buffer allocated on the stack. The root cause of this vulnerability is the unsafe use of the strcpy function at the following code location: strcpy((char *)(InstPointByIndex + 216), src_1);. Here, the destination buffer is offset 216 bytes from InstPointByIndex and has a fixed allocation, yet the source string src_1 is populated directly from the attacker-controlled Profile parameter without any boundary checks. When the supplied input exceeds the size of the destination buffer, excess data overwrites adjacent memory on the stack, including critical control data. |
|---|
| स्रोत | ⚠️ https://github.com/yuezhaoshanmu/cve/blob/main/2.md |
|---|
| उपयोगकर्ता | Missa (UID 98182) |
|---|
| सबमिशन | 12/05/2026 06:11 AM (23 दिन पहले) |
|---|
| संयम | 31/05/2026 07:47 PM (20 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 367586 [UTT HiPER 1200GW तक 2.5.3-170306 /goform/formFireWall strcpy प्रोफ़ाइल बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|