This vulnerability involves a stack-based buffer overflow caused by unsafe use of strcpy in the /goform/APSecurity_5g function of UTT HiPER 1250GW firmware version 3.2.7-210907-180535. An attacker can remotely trigger this overflow by manipulating the cipher argument, potentially leading to code execution or denial of service. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity. Although the exploit is public, no official remediation or patch has been provided by the vendor as of the publication date.

Successful exploitation of this vulnerability could allow a remote attacker with low privileges to cause a stack-based buffer overflow, potentially leading to arbitrary code execution or denial of service on the affected device. The high CVSS score reflects the significant impact on confidentiality, integrity, and availability.

No official patch or remediation has been provided by the vendor. Users should consider mitigating exposure by restricting remote access to the affected device and monitoring for exploit attempts. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.