This vulnerability affects UTT HiPER 1250GW firmware versions up to 3.2.7-210907-180535. It arises from improper handling of the NatBind argument in the strcpy function located in /goform/formNatStaticMap, leading to a buffer overflow condition. The vulnerability can be triggered remotely without user interaction, potentially allowing an attacker to execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 8.7, indicating high severity. Although an exploit is publicly available, there is no vendor-provided patch or official remediation at this time.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on affected UTT HiPER 1250GW devices. Given the high CVSS score and the availability of a public exploit, affected systems are at significant risk if exposed to untrusted networks. There are no known exploits in the wild reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected device's management interfaces to trusted sources only and monitor for any suspicious activity related to NatBind parameter usage. Avoid exposing the device directly to untrusted networks.