| शीर्षक | UTT HiPER 1250GW <=v3.2.7-210907-180535 Buffer Overflow |
|---|
| विवरण | A serious buffer overflow vulnerability has been identified in the UTT HiPER 1250GW router. The vulnerable endpoint is /goform/aspRemoteApConfTempSend, where insufficient validation of the Profile parameter allows an attacker to trigger a stack-based buffer overflow.
By sending a specially crafted HTTP request to /goform/aspRemoteApConfTempSend containing an oversized value for the Profile parameter, an attacker can overflow a fixed-size buffer allocated on the stack. The root cause lies in the unsafe use of the strcpy function at strcpy(dest, src);. Here, dest is a buffer of predetermined length located on the stack, while src is populated directly from the attacker-controlled Profile input without any boundary checks. When the supplied input exceeds the capacity of dest, the strcpy operation writes beyond the buffer boundary, corrupting adjacent stack memory—including critical control data such as saved return addresses and frame pointers. |
|---|
| स्रोत | ⚠️ https://github.com/7wkajk/CVE-VUL/blob/main/107.md |
|---|
| उपयोगकर्ता | yecp (UID 95483) |
|---|
| सबमिशन | 09/07/2026 09:02 AM (2 महीनों पहले) |
|---|
| संयम | 23/08/2026 04:19 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 394558 [UTT HiPER 1250GW तक 3.2.7-210907-180535 HTTP Request aspRemoteApConfTempSend strcpy प्रोफ़ाइल बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|