Utt Hiper 1250Gw vulnerabilities

CVE-2026-4862 [HIGH] CWE-119 CVE-2026-4862: A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file /goform/formConfigDnsFilterGlobal of the component Parameter Handler. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed public

CVE-2026-5566 [HIGH] CWE-119 CVE-2026-5566: A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects the functio A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument NatBind results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.

CVE-2026-9632 [HIGH] CWE-119 CVE-2026-9632: A flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this issue is the f A flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this issue is the function strcpy of the file /goform/formGroupConfig of the component Web Management Interface. Executing a manipulation of the argument Profile can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publ

CVE-2026-9631 [HIGH] CWE-119 CVE-2026-9631: A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnera A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/formConfigFastDirectionW of the component Web Management Interface. Performing a manipulation of the argument Profile results in stack-based buffer overflow. It is possible to initiate the attack remotely.

CVE-2026-7419 [HIGH] CWE-119 CVE-2026-7419: A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file route/goform/formTaskEdit_ap. The manipulation of the argument Profile leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

CVE-2026-5544 [HIGH] CWE-119 CVE-2026-5544: A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. The impacted elem A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. The impacted element is an unknown function of the file /goform/formRemoteControl. The manipulation of the argument Profile results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks

CVE-2026-7418 [HIGH] CWE-119 CVE-2026-7418: A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535. This vulnerability aff A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535. This vulnerability affects the function strcpy of the file route/goform/NTP. Executing a manipulation of the argument Profile can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2026-7420 [HIGH] CWE-119 CVE-2026-7420: A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the f A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file route/goform/ConfigAdvideo. The manipulation of the argument Profile results in buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

CVE-2026-4488 [HIGH] CWE-119 CVE-2026-4488: A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected is the functi A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected is the function strcpy of the file /goform/setSysAdm. Such manipulation of the argument GroupName leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.