A buffer overflow vulnerability in the UTT Jinqi 1250GW router allows an authenticated attacker to trigger a denial of service condition via the administrative configuration interface.

This memory corruption flaw is caused by improper handling of input within the sub_453DC function of the /goform/formConfigApConfTemp endpoint. An attacker with administrative credentials can trigger a buffer overflow by sending a maliciously crafted POST request to the configuration interface.

Successful exploitation of this vulnerability results in a denial of service, rendering the affected network router unresponsive. Given the device's role as a network gateway, this leads to significant business disruption, loss of connectivity for internal systems, and potential requirements for manual hardware reboots. While the CVSS score of 8.8 indicates a high severity, the impact is primarily focused on availability rather than remote code execution.

Immediate Action: As there is currently no vendor-provided patch, administrators should restrict access to the management interface to trusted IP addresses only and ensure that administrative credentials are complex and unique.

Proactive Monitoring: Monitor system logs for repeated crashes of the management service or unauthorized attempts to access the /goform/formConfigApConfTemp endpoint.

Compensating Controls: Deploy a Web Application Firewall or network access control list to filter traffic to the router management interface, specifically blocking large or malformed POST requests to the identified vulnerable path.

Public Exploit Available: Yes, a proof-of-concept exists as detailed in the technical write-up provided by the researcher on GitHub.

Due to the lack of an official vendor patch and the availability of a public proof-of-concept, users of the UTT Jinqi 1250GW should prioritize isolating the management interface from the public internet. Organizations must verify their firmware versions and apply any future security updates from the vendor as soon as they become available to remediate the underlying memory corruption flaw.