CVE-2026-78170: Buffer Overflow in UTT HiPER 1200GW

A buffer overflow vulnerability (CVE-2026-78170) affects UTT HiPER 1200GW up to version 2.5.3-170306. The issue is located in the strcpy function of the /goform/formConfigFastDirectionW endpoint, where an attacker can manipulate the ssid parameter to trigger a buffer overflow condition. The vulnerability is remotely exploitable without authentication or user interaction. The CVSS 4.0 base score is 8.7, indicating high severity. Although exploit code has been published, no active exploitation has been confirmed. No vendor advisory or patch information is available at this time.

Successful exploitation of this vulnerability could allow a remote attacker to cause a buffer overflow, potentially leading to denial of service or arbitrary code execution on the affected device. Given the high CVSS score and remote attack vector, the impact is significant for affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the vulnerable endpoint and monitoring for suspicious activity related to the ssid parameter. Avoid exposing the device management interface to untrusted networks.