This vulnerability involves a stack-based buffer overflow in the UTT HiPER 1200GW device firmware (up to version 2.5.3-170306). The issue arises from unsafe use of the strcpy function in the /goform/formFireWall component, specifically when handling the Profile argument. An attacker can remotely trigger this overflow, potentially leading to arbitrary code execution or denial of service. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No official patch or vendor advisory has been provided yet.

Successful exploitation can lead to remote code execution or denial of service on the affected device, compromising confidentiality, integrity, and availability. The vulnerability can be triggered remotely without authentication or user interaction, making it a significant risk for affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting network access to the affected device's management interfaces to trusted sources only and monitor for any unusual activity related to the /goform/formFireWall endpoint. Avoid exposing the device management interface to untrusted networks.