This vulnerability involves a stack-based buffer overflow in the UTT HiPER 1250GW device, specifically in the strcpy function within the /goform/aspRemoteApConfTempSend HTTP Request Handler. The flaw is triggered by manipulating the Profile argument, allowing a remote attacker to cause memory corruption. The affected version is exactly 3.2.7-210907-180535. The vulnerability has a CVSS 4.0 score of 9.4, indicating critical severity. Public exploit code exists, but no vendor patch or official remediation has been published as of the data provided.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service due to stack-based buffer overflow. Given the high CVSS score and remote attack vector with no user interaction required, the impact is critical for affected systems. However, there is no confirmed evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected device and monitor for suspicious activity targeting the /goform/aspRemoteApConfTempSend endpoint. Avoid exposing the device to untrusted networks.