This vulnerability exists in UTT HiPER 1200GW up to version 2.5.3-170306. The strcpy function in /goform/formConfigFastDirectionW improperly handles the ssid argument, allowing an attacker to cause a buffer overflow remotely. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Exploit code has been published, increasing the risk of exploitation. No vendor advisory or patch information is currently available.

Successful exploitation can lead to a buffer overflow, potentially allowing an attacker to execute arbitrary code or cause a denial of service on the affected device. The vulnerability affects confidentiality, integrity, and availability with high impact. The attack can be performed remotely without user interaction or privileges, increasing the risk to exposed devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected device's management interfaces to trusted users only and monitor for any suspicious activity related to the ssid parameter in requests to /goform/formConfigFastDirectionW.