This vulnerability involves a buffer overflow in the strcpy function of the route/goform/formTaskEdit_ap file in UTT HiPER 1250GW firmware versions up to 3.2.7-210907-180535. Specifically, the Profile argument can be manipulated to overflow the buffer, potentially allowing remote attackers to execute arbitrary code or cause denial of service. The vulnerability is remotely exploitable without authentication or user interaction. The CVSS 4.0 base score is 8.7, reflecting high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Although an exploit is publicly available, there is no indication of active exploitation in the wild. No official patch or vendor advisory is currently available.

Successful exploitation of this buffer overflow can lead to remote code execution or denial of service on affected UTT HiPER 1250GW devices. Given the remote attack vector and lack of required privileges or user interaction, the vulnerability poses a significant risk to device integrity and availability. The high CVSS score (8.7) underscores the critical nature of the impact. However, no confirmed exploitation in the wild has been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider limiting network exposure of affected devices and monitor for unusual activity related to the Profile parameter. Avoid deploying affected firmware versions where possible and apply updates promptly once available.