CVE-2026-78169: Stack-based Buffer Overflow in UTT HiPER 1250GW

This vulnerability affects UTT HiPER 1250GW up to version 3.2.7-210907-180535. It involves a stack-based buffer overflow caused by improper handling of the Profile argument in the strcpy function of the HTTP Request Handler component (/goform/aspRemoteApConfTempSend). The flaw allows remote attackers to potentially execute arbitrary code or cause a denial of service. The CVSS 4.0 base score is 9.4, indicating critical severity. Exploit code is publicly available, but no official patch or remediation level has been disclosed by the vendor.

Successful exploitation can lead to remote code execution or denial of service due to stack-based buffer overflow. The vulnerability is remotely exploitable without user interaction and requires low attack complexity. The presence of public exploit code increases the likelihood of attacks.

No official patch or remediation has been confirmed by the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting access to the affected HTTP endpoint and monitoring for exploit attempts.