Skip to content
Threat Feed
Subscribe

Vendor

UTT

7 briefs RSS
high threat

CVE-2026-14721: UTT HiPER 1250GW Remote Code Execution via Buffer Overflow

A critical stack-based buffer overflow vulnerability (CVE-2026-14721) in UTT HiPER 1250GW firmware versions up to 3.2.7-210907-180535 allows remote, unauthenticated attackers to achieve arbitrary code execution by manipulating the 'ssid' argument in the /goform/ConfigWirelessBase_5g web endpoint, with public exploit disclosure indicating active exploitation risk.

exploited HiPER 1250GW buffer-overflow remote-code-execution network-device web-application
2t 1c
high advisory

UTT HiPER 1200GW Stack-Based Buffer Overflow Vulnerability (CVE-2026-10292)

A stack-based buffer overflow vulnerability (CVE-2026-10292) exists in the strcpy function of /goform/formTaskEdit in UTT HiPER 1200GW up to version 2.5.3-170306, allowing for remote code execution.

HiPER 1200GW cve buffer overflow remote code execution web application
1r 1t 1c
high threat

UTT HiPER 1200GW Stack-Based Buffer Overflow Vulnerability (CVE-2026-10293)

A stack-based buffer overflow vulnerability (CVE-2026-10293) exists in UTT HiPER 1200GW up to version 2.5.3-170306 due to the strcpy function in /goform/formFireWall, allowing remote exploitation via manipulation of the Profile argument.

exploited HiPER 1200GW cve buffer-overflow router network-device
2r 1t 1c
critical threat

UTT HiPER 1200GW Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in UTT HiPER 1200GW devices up to version 2.5.3-170306, stemming from manipulation of the `strcpy` function in the `/goform/formRemoteControl` file, which allows remote attackers to execute arbitrary code.

HiPER 1200GW buffer-overflow iot router cve
2r 1t 1c
critical advisory

UTT HiPER 1250GW Buffer Overflow Vulnerability (CVE-2026-7420)

A buffer overflow vulnerability in UTT HiPER 1250GW devices (versions up to 3.2.7-210907-180535) allows remote attackers to execute arbitrary code by manipulating the 'Profile' argument in the `strcpy` function of the `route/goform/ConfigAdvideo` file, due to insufficient bounds checking.

HiPER 1250GW buffer-overflow remote-code-execution iot
2r 1t 1c
critical advisory

UTT HiPER 1250GW Buffer Overflow Vulnerability

A remote buffer overflow vulnerability exists in the UTT HiPER 1250GW device due to improper handling of the 'Profile' argument in the NTP configuration, potentially allowing for arbitrary code execution.

HiPER 1250GW buffer-overflow remote-code-execution cve-2026-7418
2r 1t 1c
critical advisory

UTT HiPER 1250GW strcpy Buffer Overflow Vulnerability (CVE-2026-4862)

A buffer overflow vulnerability exists in UTT HiPER 1250GW devices, allowing remote attackers to execute arbitrary code by exploiting the strcpy function in the /goform/formConfigDnsFilterGlobal component through manipulation of the GroupName argument.

HiPER 1250GW cve-2026-4862 buffer-overflow utt-hiper webserver
2r 1t