CVE-2026-7418

UTT HiPER 1250GW NTP strcpy buffer overflow

CVSS 8.7 HIGHEPSS 0.6%CWE-119 CWE-120

Vexday Risk Score

41Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 8.7EPSS 0.6%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

29 Apr 2026Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535. This vulnerability affects the function strcpy of the file route/goform/NTP. Executing a manipulation of the argument Profile can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Affected products

UTT · HiPER 1250GW

public PoCs found — 1

cve_referencegithub.com/kirlic123/IOTvulner/blob/main/4035/1/1.mdunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/kirlic123/IOTvulner/blob/main/4035/1/1.md https://vuldb.com/submit/803993 https://vuldb.com/vuln/360155 https://vuldb.com/vuln/360155/cti