This vulnerability involves a buffer overflow in the strcpy function within the route/goform/ConfigAdvideo component of UTT HiPER 1250GW devices up to version 3.2.7-210907-180535. The flaw is triggered by manipulating the Profile argument remotely, leading to memory corruption. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service due to buffer overflow, compromising the confidentiality, integrity, and availability of the affected device. The public availability of an exploit increases the likelihood of attacks. The device's network exposure and lack of required privileges for exploitation heighten the risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting network access to the affected device and monitoring for suspicious activity related to the ConfigAdvideo function. Avoid exposing the device to untrusted networks where possible.