This vulnerability involves a stack-based buffer overflow in the strcpy function of the /goform/aspApBasicConfigUrcp HTTP handler in UTT HiPER 1250GW firmware version 3.2.7-210907-180535. The issue arises from improper handling of the 'pvid' argument, which can be manipulated remotely to trigger the overflow. The vulnerability has a CVSS 4.0 score of 9.4, indicating critical severity with high impact and exploitability. Although the exploit has been publicly disclosed, there is no confirmed patch or official remediation level provided by the vendor as of the publication date.

Successful exploitation of this vulnerability can lead to a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code or cause a denial of service on the affected device. Given the critical CVSS score and the nature of the vulnerability, the impact on confidentiality, integrity, and availability is high.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, it is recommended to restrict remote access to the affected HTTP handler and monitor for any unusual activity related to the 'pvid' parameter. Avoid exposing the device to untrusted networks where possible.