A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipul…

A stack-based buffer overflow vulnerability has been identified in UTT HiPER 1250GW devices running firmware up to version 3.2.7-210907-180535. The vulnerability exists in the strcpy function within the /goform/APSecurity_5g file, where manipulation of the 'cipher' argument can trigger a buffer overflow. The flaw can be exploited remotely without requiring physical access to the device. A public exploit has been released, increasing the risk of active exploitation. The vulnerability affects the 5GHz wireless security configuration interface of the router. The vendor was contacted prior to public disclosure but did not respond. No patch or mitigation has been confirmed from the vendor at the time of disclosure. This is classified as a high-severity issue given remote exploitability and public exploit availability.