This vulnerability involves a buffer overflow caused by improper use of the strcpy function in the /goform/formUser component of UTT HiPER 1200GW devices running firmware up to version 2.5.3-1703. The flaw allows a remote attacker to send crafted input that overflows a buffer, potentially leading to arbitrary code execution or denial of service. The CVSS 4.0 base score is 8.7, reflecting high impact and ease of exploitation with no required privileges or user interaction. Although an exploit is publicly available, no official fix or patch has been documented as of the published date.

Successful exploitation can lead to remote code execution or denial of service on affected UTT HiPER 1200GW devices. The vulnerability is exploitable over the network without authentication or user interaction, making affected devices highly susceptible to attack. The presence of a public exploit increases the likelihood of active exploitation attempts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting network access to the affected device's management interfaces to trusted sources only and monitor for unusual activity related to the /goform/formUser endpoint. Avoid exposing the device directly to untrusted networks.