This vulnerability involves a stack-based buffer overflow in the UTT HiPER 1250GW device firmware versions up to 3.2.7-210907-180535. The issue arises from improper handling of the Profile argument in a function related to /goform/formRemoteControl, allowing remote attackers to overflow the stack. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality, integrity, and availability with high exploitability. No official patch or remediation level has been published by the vendor, and the device is not a cloud service. Public exploit code is available, increasing the risk of exploitation.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device due to the stack-based buffer overflow. The attack requires no privileges or user interaction and can be performed remotely over the network. The vulnerability impacts the confidentiality, integrity, and availability of the device. Given the availability of a public exploit, the risk of active exploitation is elevated despite no confirmed reports of exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, users should monitor vendor communications closely. Until a patch is available, consider restricting network access to the affected device, especially to the /goform/formRemoteControl endpoint, to reduce exposure. Avoid exposing the device directly to untrusted networks.