A critical buffer overflow vulnerability in UTT HiPER 810G routers allows authenticated attackers to trigger memory corruption and potential denial of service.

The vulnerability is located in the strcpy function within the /goform/formConfigDnsFilterGlobal file. An authenticated attacker can trigger a buffer overflow by supplying an overly long string to the GroupName parameter, which lacks necessary size validation.

Successful exploitation of this flaw can lead to a complete denial of service for the network appliance, impacting connectivity for all downstream users and systems. Given the CVSS score of 8.8, this represents a significant risk to network availability and operational continuity. Unauthorized manipulation of memory structures could also theoretically lead to arbitrary code execution, further compromising the integrity of the gateway device.

Immediate Action: Since no specific patch version is currently identified, administrators should restrict administrative access to the device management interface to trusted IP addresses only and disable unnecessary services. Contact UTT support immediately for firmware updates that address this buffer overflow.

Proactive Monitoring: Review system logs for frequent reboots or crashes of the router, which may indicate exploitation attempts. Monitor HTTP traffic directed at the /goform/formConfigDnsFilterGlobal endpoint for unusually large payloads in the GroupName parameter.

Compensating Controls: Implement a Web Application Firewall or network-level access control list to inspect and block requests to the vulnerable /goform/ formConfigDnsFilterGlobal endpoint that contain suspicious or excessively long string inputs.

Public Exploit Available: Yes, a proof-of-concept exists as documented in a publicly available security research repository.

This vulnerability presents a high risk to the stability of UTT HiPER 810G infrastructure. Organizations using these devices must prioritize limiting administrative access to the web interface immediately while awaiting official vendor patches. Failure to secure these devices could result in significant network outages if the vulnerability is leveraged for denial of service attacks.