An authenticated buffer overflow vulnerability in the UTT HiPER 810G router allows remote attackers to trigger a denial of service condition by supplying a malicious payload.

This is a memory corruption vulnerability (CWE-120) triggered by an unsafe call to the strcpy function within the /goform/ConfigExceptMSN endpoint. The flaw requires an authenticated user with administrative privileges to send a crafted HTTP request with an excessively long remark parameter to cause process termination.

Successful exploitation of this vulnerability results in an immediate denial of service for the affected router, causing network downtime for all connected users and systems. Given the critical nature of edge routing devices in maintaining business operations, the inability to process traffic or provide connectivity can severely disrupt organizational productivity and communication. While the CVSS score of 7.2 reflects a high severity, the requirement for authenticated access slightly lowers the immediate risk to external exposure.

Immediate Action: Update the firmware of all UTT HiPER 810G devices to the latest version provided by the vendor.

Proactive Monitoring: Monitor device logs for repeated crashes, unexpected reboots, or unauthorized access attempts targeting the /goform/ConfigExceptMSN interface.

Compensating Controls: Restrict access to the router management interface to trusted internal IP addresses only, and implement strict firewall rules to prevent unauthorized users from interacting with administrative endpoints.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the linked research write-up on GitHub.

Organizations utilizing UTT HiPER 810G routers must treat this vulnerability with high priority due to the availability of public proof-of-concept code. Administrators should verify the current firmware version and apply updates immediately to prevent potential service disruptions. If an official patch is not yet available, strictly limit administrative interface access to known, secure management networks to mitigate the risk of exploitation.