A critical buffer overflow vulnerability in the UTT 1250GW router poses a significant risk of remote code execution for authenticated users.

The flaw resides in the strcpy function within the /goform/formUserStatusRemark file, where improper handling of the Username argument leads to a buffer overflow. This vulnerability requires the attacker to have low-level privileges to initiate the request.

The exploitation of this buffer overflow can result in total system compromise, potentially allowing an attacker to execute arbitrary code with elevated permissions. Given the CVSS score of 8.8, this vulnerability presents a high risk to organizational security, including the potential for unauthorized data access and complete loss of router availability.

Immediate Action: As the vendor has not provided a patch, administrators should restrict access to the management interface of the UTT 1250GW to trusted IP addresses only.

Proactive Monitoring: Security teams should implement enhanced logging for all traffic directed at the /goform/formUserStatusRemark endpoint and monitor for abnormal service crashes or unexpected process restarts.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to inspect and sanitize the Username parameter for excessive character length before it reaches the vulnerable endpoint.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the GitHub issue referenced by the CVE record.

Given the lack of a vendor-supplied patch and the availability of a public proof-of-concept, the risk associated with this vulnerability is elevated. Organizations currently utilizing the UTT 1250GW should isolate these devices from the public internet immediately and wait for official vendor guidance or consider migrating to a supported hardware solution.