Description
A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file route/goform/ConfigAdvideo. The manipulation of the argument Profile results in buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| UTT | HiPER 1250GW | 3.2.7-210907-180535 | — |
References
- VDB-360157 | UTT HiPER 1250GW ConfigAdvideo strcpy buffer overflow vdb-entry technical-description
- VDB-360157 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #803997 | UTT HiPER 1250GW <=v3.2.7-210907-180535 Buffer Overflow third-party-advisory
- https://github.com/kirlic123/IOTvulner/blob/main/4035/5/5.md exploit