This vulnerability involves a stack-based buffer overflow triggered by improper handling of the Profile argument in an unknown function within the /goform/formRemoteControl file of UTT HiPER 1250GW firmware versions up to 3.2.7-210907-180535. The flaw allows remote attackers to execute code or cause denial of service due to corrupted stack memory. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, no user interaction, and high impact on confidentiality, integrity, and availability. No official fix or patch has been documented, and the exploit code is publicly available, increasing the risk of exploitation.

Successful exploitation can lead to remote code execution or denial of service on affected UTT HiPER 1250GW devices. The vulnerability impacts confidentiality, integrity, and availability of the device. Given the remote attack vector and low complexity, attackers can exploit this flaw without user interaction or elevated privileges. The public availability of exploit code increases the likelihood of attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected device, especially to the /goform/formRemoteControl endpoint, and monitor for suspicious activity. Avoid exposing the device directly to untrusted networks. Follow vendor communications closely for updates on patches or mitigations.