Executive brief
A security vulnerability exists in the UTT HiPER 1250GW enterprise router, which is used to manage network traffic and connectivity. An attacker can exploit this flaw to cause the device to crash or reboot, potentially leading to a complete network outage. In some cases, this could also allow an attacker to gain unauthorized control over the device or access sensitive data passing through the network.
Technical details
A stack-based buffer overflow vulnerability exists in the UTT HiPER 1250GW router firmware up to version 3.2.7-210907-180535. The flaw is located within the /goform/formNatStaticMap interface, specifically involving the strcpy function. When the 'Action' parameter is not set to 'add', the application fails to validate the length of the 'NatBind' (internally 'NatBinds') parameter before copying it into a fixed-size buffer. An attacker with low-privileged network access can send a specially crafted POST request to trigger the overflow. This results in a denial of service (device crash/reboot) and potentially remote code execution. A public exploit (PoC) is available.
Affected products
- UTT HiPER 1250GW up to 3.2.7-210907-180535
Timeline
- 2026-03-19: disclosed: Initial discovery and PoC shared on GitHub
- 2026-04-05: advisory: CVE published and VulDB entry created