This vulnerability involves a buffer overflow caused by improper use of the strcpy function in the /goform/formUser component of UTT HiPER 1200GW devices running firmware up to version 2.5.3-1703. An attacker can remotely trigger this flaw to cause memory corruption, potentially leading to arbitrary code execution or denial of service. The CVSS 4.0 base score is 8.7, reflecting high impact and ease of exploitation without user interaction or privileges. Although an exploit has been published, there is no vendor-provided fix or mitigation at this time.

Successful exploitation can result in remote code execution or denial of service on affected UTT HiPER 1200GW devices. The vulnerability requires no user interaction and can be triggered remotely, making it a significant risk for affected systems. The published exploit increases the likelihood of active attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting network exposure of affected devices to untrusted networks and monitor for suspicious activity related to /goform/formUser requests. No official vendor mitigation or temporary fix is currently available.