A critical buffer overflow vulnerability in UTT HiPER 810G routers, triggered via the /goform/formRemoteControl endpoint, poses a significant risk of remote code execution or system instability.

The flaw exists in the strcpy function within the /goform/formRemoteControl file, where improper handling of input data leads to a buffer overflow. While the CVSS vector indicates that low privileges are required, the vulnerability can be launched remotely by an authenticated user.

Successful exploitation of this vulnerability allows an attacker to cause a denial of service or potentially achieve remote code execution on the affected router. Given the CVSS score of 8.8, this represents a high-severity risk that could lead to full compromise of network traffic routing and internal infrastructure security.

Immediate Action: Since no specific patch version is currently identified, administrators should restrict network access to the router management interface and disable remote management features until the vendor provides a firmware update.

Proactive Monitoring: Monitor device logs for anomalous traffic directed at the /goform/formRemoteControl endpoint and watch for unexpected router reboots or service interruptions.

Compensating Controls: Implement an access control list or Web Application Firewall rule to block unauthorized or suspicious POST requests to the /goform/formRemoteControl URI.

Public Exploit Available: Yes, a proof-of-concept exists as documented in the linked research write-up on GitHub.

Due to the severity of this buffer overflow and the availability of a public proof-of-concept, immediate defensive action is required. Organizations utilizing UTT HiPER 810G routers should prioritize isolating the management interface from external networks and remain vigilant for vendor security advisories regarding a permanent firmware patch.