This vulnerability in UTT HiPER 1200GW up to version 2.5.3-170306 involves a stack-based buffer overflow in an unspecified function within the /goform/formPptpClientConfig file of the Web Management Interface. The issue is triggered by manipulating input parameters related to PPTP client configuration such as server address, username, password, or tunnel name. The vulnerability can be exploited remotely without user interaction and requires low attack complexity and privileges. The CVSS 4.0 base score is 8.7, indicating a high severity with high impact on confidentiality, integrity, and availability. No vendor patch or official remediation has been documented.

Successful exploitation of this vulnerability could allow a remote attacker to cause a stack-based buffer overflow, potentially leading to arbitrary code execution or denial of service on the affected device. The vulnerability impacts confidentiality, integrity, and availability of the device's Web Management Interface. Although exploit code is publicly available, there are no confirmed reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting remote access to the Web Management Interface and monitor for unusual activity. Avoid exposing the affected device's management interface to untrusted networks. Follow vendor communications closely for updates on patches or mitigations.