A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempE…

A stack-based buffer overflow vulnerability has been identified in UTT HiPER 1250GW routers up to version v3.2.7-210907-180535. The vulnerability exists in the strcpy function within the file /goform/getOneApConfTempEntry, where manipulation of the tempName argument triggers the overflow. The flaw can be exploited remotely without requiring physical access to the device. A public exploit is already available, increasing the risk of active exploitation in the wild. The vendor was notified prior to disclosure but has not responded, leaving the vulnerability unpatched. This represents a significant risk to network infrastructure devices running the affected firmware versions.