This vulnerability involves a stack-based buffer overflow in the strcpy function of the /goform/formGroupConfig file in UTT HiPER 1200GW up to version 2.5.3-170306. An attacker can remotely exploit this by manipulating the timestart argument, potentially leading to arbitrary code execution or denial of service. The vulnerability has a CVSS 4.0 score of 9.4, indicating critical severity. Exploit code has been publicly released, but no official fix or mitigation has been provided by the vendor at this time.

Successful exploitation can lead to a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code or cause a denial of service on affected devices. The availability of public exploit code increases the likelihood of attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected functionality and monitoring for exploit attempts.