This vulnerability affects the UTT HiPER 1250GW device firmware up to version 3.2.7-210907-180535. It arises from improper handling of the Profile argument in the strcpy function located in route/goform/NTP, leading to a buffer overflow condition. The vulnerability is remotely exploitable without requiring user interaction or elevated privileges, as indicated by the CVSS vector. The exploit has been publicly disclosed, increasing the risk of potential attacks. No official fix or mitigation has been documented by the vendor as of the published date.

Successful exploitation of this buffer overflow vulnerability could allow an attacker to execute arbitrary code remotely on the affected device. This may lead to compromise of device integrity and availability. The CVSS score of 8.7 reflects a high impact due to the ease of remote exploitation and potential for significant control over the device. However, there are no confirmed reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. Network-level protections such as restricting access to the affected service and applying firewall rules may reduce exposure. Avoid exposing the device management interfaces to untrusted networks.