Skip to content
Threat Feed

Vendor

UTT

5 briefs RSS
high advisory

UTT HiPER 1200GW Stack-Based Buffer Overflow Vulnerability (CVE-2026-10292)

A stack-based buffer overflow vulnerability (CVE-2026-10292) exists in the strcpy function of /goform/formTaskEdit in UTT HiPER 1200GW up to version 2.5.3-170306, allowing for remote code execution.

HiPER 1200GW cve buffer overflow remote code execution web application
1r 1t 1c
high threat

UTT HiPER 1200GW Stack-Based Buffer Overflow Vulnerability (CVE-2026-10293)

A stack-based buffer overflow vulnerability (CVE-2026-10293) exists in UTT HiPER 1200GW up to version 2.5.3-170306 due to the strcpy function in /goform/formFireWall, allowing remote exploitation via manipulation of the Profile argument.

exploited HiPER 1200GW cve buffer-overflow router network-device
2r 1t 1c
critical threat

UTT HiPER 1200GW Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in UTT HiPER 1200GW devices up to version 2.5.3-170306, stemming from manipulation of the `strcpy` function in the `/goform/formRemoteControl` file, which allows remote attackers to execute arbitrary code.

HiPER 1200GW buffer-overflow iot router cve
2r 1t 1c
critical advisory

UTT HiPER 1250GW Buffer Overflow Vulnerability (CVE-2026-7420)

A buffer overflow vulnerability in UTT HiPER 1250GW devices (versions up to 3.2.7-210907-180535) allows remote attackers to execute arbitrary code by manipulating the 'Profile' argument in the `strcpy` function of the `route/goform/ConfigAdvideo` file, due to insufficient bounds checking.

HiPER 1250GW buffer-overflow remote-code-execution iot
2r 1t 1c
critical advisory

UTT HiPER 1250GW Buffer Overflow Vulnerability

A remote buffer overflow vulnerability exists in the UTT HiPER 1250GW device due to improper handling of the 'Profile' argument in the NTP configuration, potentially allowing for arbitrary code execution.

HiPER 1250GW buffer-overflow remote-code-execution cve-2026-7418
2r 1t 1c