A buffer overflow vulnerability in UTT HiPER 810G routers enables remote code execution or system crashes for authenticated users, presenting a significant risk to network infrastructure.

This is a buffer overflow vulnerability (CWE-120) located in the strcpy function within the /goform/formPolicyRouteConf endpoint. An authenticated attacker can trigger this condition by supplying a malicious payload to the GroupName parameter.

Successful exploitation of this vulnerability allows an attacker to compromise the integrity and availability of the affected network device. Given the CVSS score of 8.8, this flaw represents a high-severity risk, as it permits unauthorized code execution with elevated privileges, potentially leading to a total loss of confidentiality, integrity, and availability of the routing services.

Immediate Action: Contact the vendor for firmware updates or security patches for the HiPER 810G series, as no official patch version is currently identified.

Proactive Monitoring: Review administrative access logs for suspicious POST requests to the /goform/formPolicyRouteConf endpoint, particularly those containing unusually long string values in the GroupName parameter.

Compensating Controls: Implement strict access control lists to restrict management interface access to trusted internal IP addresses only, thereby limiting the ability of unauthorized or untrusted users to reach the vulnerable endpoint.

Public Exploit Available: Yes, a proof-of-concept exploit exists as documented in the linked research write-up on GitHub.

Given the availability of a public proof-of-concept and the high-severity nature of this memory corruption flaw, immediate attention is required. Administrators should restrict access to the management interface to prevent exploitation attempts while awaiting official firmware remediation from the vendor.