This vulnerability affects the UTT HiPER 1200GW device up to firmware version 2.5.3-170306. The strcpy function in the /goform/formNatStaticMap endpoint improperly processes the NatBind parameter, leading to a buffer overflow condition. An attacker can remotely send crafted input to trigger this overflow, potentially causing denial of service or arbitrary code execution. The CVSS 4.0 base score is 8.7, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Although public exploits exist, there is no vendor-provided patch or mitigation information available at this time.

Successful exploitation of this vulnerability can lead to a buffer overflow, which may allow an attacker to execute arbitrary code remotely or cause a denial of service on the affected device. The high CVSS score indicates significant impact on confidentiality, integrity, and availability. The vulnerability can be exploited without authentication or user interaction, increasing its risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, it is recommended to limit network exposure of the affected device, especially restricting access to the /goform/formNatStaticMap endpoint. Monitor for any updates from UTT regarding patches or official mitigations.