| 标题 | UTT HiPER 1250GW <= v3.2.7-210907-180535 Buffer Overflow |
|---|
| 描述 | UTT HiPER 1250GW router firmware <= v3.2.7-210907-180535 contains a stack-based buffer overflow in the /goform/formRemoteControl handler. The vulnerability is caused by unsafe use of strcpy when processing the Profile parameter, which is fully controllable by an authenticated user. By submitting an excessively long Profile value, an attacker can overwrite memory and crash the device, resulting in denial of service. |
|---|
| 来源 | ⚠️ https://github.com/jinxjinxboom/cve/issues/1 |
|---|
| 用户 | cosy (UID 96606) |
|---|
| 提交 | 2026-03-18 13時29分 (7 月前) |
|---|
| 管理 | 2026-04-04 08時56分 (17 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 355297 [UTT HiPER 1250GW 直到 3.2.7-210907-180535 formRemoteControl Profile 内存损坏] |
|---|
| 积分 | 20 |
|---|