The UTT HiPER 1200GW device up to version 2.5.3-170306 contains a stack-based buffer overflow vulnerability in the strcpy function of the /goform/pptpSrvGlobalConfig file. This occurs when the EncryptionMode argument is manipulated, allowing an attacker to overflow the stack remotely. The vulnerability requires low complexity and privileges, with no user interaction needed. The vendor was contacted but did not provide a response or patch. The vulnerability is publicly disclosed with exploit details available, but no active exploitation has been confirmed.

Successful exploitation of this vulnerability could allow a remote attacker to cause a stack-based buffer overflow, potentially leading to arbitrary code execution or denial of service on the affected device. The attack can be performed remotely without user interaction and requires only low privileges and low complexity, making it a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should monitor official channels for updates. Until a patch is available, consider limiting network exposure of the affected device and applying any available network-level protections to reduce attack surface.