CVE-2026-4862

UTT HiPER 1250GW Parameter formConfigDnsFilterGlobal strcpy buffer overflow

CVSS 8.7 HIGHEPSS 0.5%CWE-119 CWE-120

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.7EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

26 mar 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file /goform/formConfigDnsFilterGlobal of the component Parameter Handler. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Produtos afetados

UTT · HiPER 1250GW

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/kirlic123/IOTvulner/blob/main/309-1/5.md https://vuldb.com/?ctiid.353193 https://vuldb.com/?id.353193 https://vuldb.com/?submit.776230