| शीर्षक | UTT HiPER 1250GW <=v3.2.7-210907-180535 Buffer Overflow |
|---|
| विवरण | A serious buffer overflow vulnerability has been discovered in the UTT HiPER 1250GW router. The vulnerable endpoint is /goform/APSecurity_5g, where insufficient validation of the Profile parameter allows an attacker to trigger a stack-based buffer overflow.
By crafting a malicious HTTP request to /goform/APSecurity_5g and supplying an excessively long string for the Profile parameter, an attacker can overflow a statically allocated stack buffer. The vulnerability originates from the unsafe use of the strcpy function at the following code location: strcpy((char *)(InstPointByIndex + 1464), src_1);. In this expression, the destination is a fixed buffer starting 1464 bytes from InstPointByIndex, while src_1 is directly derived from the attacker-controlled Profile input. Because no length checks are performed before the copy operation, input larger than the buffer capacity will overwrite adjacent stack memory, corrupting critical data such as saved return addresses and frame pointers. |
|---|
| स्रोत | ⚠️ https://github.com/7wkajk/CVE-VUL/blob/main/101.md |
|---|
| उपयोगकर्ता | yecp (UID 95483) |
|---|
| सबमिशन | 15/06/2026 10:45 AM (2 महीनों पहले) |
|---|
| संयम | 04/08/2026 09:55 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 385930 [UTT HiPER 1250GW तक 3.2.7-210907-180535 /goform/APSecurity_5g strcpy cipher बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|