| शीर्षक | UTT HiPER 1250GW <=v3.2.7-210907-180535 Buffer Overflow |
|---|
| विवरण | A serious buffer overflow vulnerability has been identified in the UTT HiPER 1250GW router. The vulnerable endpoint is /goform/getOneApConfTempEntry, where improper handling of the Profile parameter allows an attacker to trigger a stack-based buffer overflow.
By sending a crafted HTTP request to /goform/getOneApConfTempEntry containing an oversized value for the Profile parameter, an attacker can cause data to be written beyond the bounds of a fixed-length stack buffer. The root cause lies in the unsafe use of the strcpy function at strcpy(Var_1, Var);. In this code, Var_1 is a buffer of a predetermined size located on the stack, while Var is populated directly from the attacker-controlled Profile input without any length validation. When the input string exceeds the capacity of Var_1, the strcpy operation overwrites adjacent stack memory, including critical control data such as saved return addresses and frame pointers. |
|---|
| स्रोत | ⚠️ https://github.com/7wkajk/CVE-VUL/blob/main/102.md |
|---|
| उपयोगकर्ता | yecp (UID 95483) |
|---|
| सबमिशन | 15/06/2026 11:29 AM (2 महीनों पहले) |
|---|
| संयम | 04/08/2026 09:59 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 385932 [UTT HiPER 1250GW तक v3.2.7-210907-180535 getOneApConfTempEntry strcpy tempName बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|