A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

A buffer overflow vulnerability has been identified in UTT HiPER 1200GW devices running firmware version up to 2.5.3-170306. The flaw exists in the strcpy function within the file /goform/formConfigFastDirectionW, where manipulation of the 'ssid' argument can trigger a buffer overflow condition. The vulnerability is remotely exploitable, meaning an attacker does not require local access to the device. A public exploit has already been released and is available for use, increasing the risk of active exploitation. The affected product is a network gateway device, making this vulnerability particularly impactful for network infrastructure security. No authentication bypass details are specified, but the remote attack vector significantly raises the threat level. Organizations using UTT HiPER 1200GW devices should apply patches or mitigations immediately.