| शीर्षक | UTT HiPER 1250GW <=v3.2.7-210907-180535 Stack-based Buffer Overflow |
|---|
| विवरण | A buffer overflow vulnerability exists in UTT HiPER 1250GW router with firmware version <=v3.2.7-210907-180535.
The vulnerability is located at the web endpoint /goform/ConfigWirelessBase_5g, triggered by the POST parameter ssid.
Unsafe function strcpy((char *)(v8 + 40), src_1); is used without bounds checking. Supplying an overlong SSID payload leads to memory corruption and remote denial of service, crashing the target router.
The vendor UTT has been notified via official email [email protected], complete sent mail record is available.
No CVE-ID has been assigned to this flaw before. This vulnerability was previously submitted to CNVD for vulnerability filing but got rejected without any assigned CVE number.
Valid POST POC is ready to reproduce the crash. |
|---|
| स्रोत | ⚠️ https://github.com/J-CLOWN-TAROT/UTT |
|---|
| उपयोगकर्ता | tarot0 (UID 98756) |
|---|
| सबमिशन | 04/06/2026 12:18 PM (1 महीना पहले) |
|---|
| संयम | 04/07/2026 09:58 AM (30 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 376308 [UTT HiPER 1250GW तक 3.2.7-210907-180535 Web Endpoint ConfigWirelessBase_5g ssid बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|