An authenticated attacker can exploit a stack-based buffer overflow in the UTT HiPER 1250GW router to gain unauthorized control or disrupt service.

This vulnerability is a stack-based buffer overflow (CWE-121) and memory corruption (CWE-119) issue. It requires the attacker to have at least low-level authenticated access to the device to trigger the flaw.

With a CVSS score of 8.8, this vulnerability poses a severe threat to network security. Exploitation could allow an attacker to bypass security controls, leading to unauthorized access to network traffic or the ability to disable critical infrastructure controlled by the router.

Immediate Action: Verify if a firmware update is available from UTT and apply it immediately. In the absence of a patch, strictly enforce the principle of least privilege for all administrative accounts.

Proactive Monitoring: Monitor for unexpected reboots or service outages on the router, which could indicate a failed exploitation attempt or system instability caused by the vulnerability.

Compensating Controls: Disable unnecessary services on the router and ensure that management interfaces are not exposed to the public internet.

Public Exploit Available: Yes, a public proof-of-concept exists on GitHub.

Due to the high severity and the availability of a public proof-of-concept, users of the UTT HiPER 1250GW should take immediate steps to secure their devices. Apply the latest vendor-supplied firmware as soon as it becomes available and restrict administrative credentials to minimize the attack surface.