A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

A buffer overflow vulnerability has been identified in UTT HiPER 1200GW devices running firmware versions up to 2.5.3-170306. The flaw resides in the strcpy function within the file /goform/formConfigFastDirectionW, where manipulation of the 'ssid' argument can trigger a buffer overflow condition. The vulnerability is remotely exploitable, meaning an attacker does not need local access to the device to leverage it. A public exploit has already been published and is available for use, increasing the risk of active exploitation. The affected product is a network gateway device, making this a significant concern for network infrastructure security. No authentication bypass details are specified, but the remote nature and published exploit raise the overall severity. Users of UTT HiPER 1200GW should apply patches or mitigations immediately. The vulnerability is tracked as CVE-2026-78170 and has been reported via NVD, VulDB, and a GitHub proof-of-concept repository.