This vulnerability affects the UTT HiPER 1250GW product up to version 3.2.7-210907-180535. It arises from improper handling of the Profile argument in the strcpy function located in route/goform/formTaskEdit_ap, leading to a buffer overflow condition. The vulnerability can be exploited remotely without requiring user interaction or elevated privileges. The CVSS 4.0 base score is 8.7, indicating high severity, with attack vector network, low attack complexity, and no privileges or user interaction needed. Exploit code is publicly available, increasing the risk of exploitation. No official patch or vendor remediation information is currently available.

Successful exploitation of this buffer overflow vulnerability could allow remote attackers to execute arbitrary code or cause denial of service on affected UTT HiPER 1250GW devices. The vulnerability's high CVSS score reflects the potential for significant impact due to remote exploitation without user interaction or privileges. However, there are no confirmed reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider limiting network exposure of affected devices and monitor for suspicious activity related to this vulnerability. No vendor-provided mitigation or temporary fix is currently documented.