The UTT HiPER 1200GW device up to version 2.5.3-170306 contains a stack-based buffer overflow vulnerability in the strcpy function within the /goform/formTaskEdit endpoint. This vulnerability allows an attacker to remotely trigger a buffer overflow condition by manipulating input to the strcpy call, potentially leading to arbitrary code execution or denial of service. The vulnerability is remotely exploitable without requiring user interaction and has a high impact on confidentiality, integrity, and availability as indicated by the CVSS 4.0 vector. No official patch or remediation guidance has been published by the vendor as of the data available.

Successful exploitation of this vulnerability may allow remote attackers to execute arbitrary code or cause a denial of service on affected UTT HiPER 1200GW devices. The vulnerability impacts confidentiality, integrity, and availability at a high level. The presence of a public exploit increases the risk of active exploitation, although no confirmed in-the-wild exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting remote access to the affected device's management interfaces to trusted networks only and monitor for unusual activity related to the /goform/formTaskEdit endpoint. Avoid exposing the device to untrusted networks to reduce exploitation risk.