A critical buffer overflow vulnerability in UTT HiPER 1200GW routers allows authenticated attackers to trigger memory corruption and potential system compromise.

The device is susceptible to a buffer overflow via the strcpy function within the /goform/websHostFilter endpoint. Successful exploitation requires the attacker to possess authenticated access to the administrative interface.

The exploitation of this vulnerability can lead to a complete compromise of the affected routing hardware, potentially resulting in unauthorized network access, data interception, or sustained denial of service. With a CVSS score of 8.8, this flaw represents a high risk to organizational infrastructure, as the router is a critical edge device that serves as a gateway for internal traffic.

Immediate Action: Since a specific patch version is currently unknown, administrators should restrict access to the administrative interface to trusted management networks only and disable remote management if not required.

Proactive Monitoring: Monitor device logs for unusual POST requests directed at the /goform/websHostFilter endpoint and investigate any unexpected router reboots or service instability.

Compensating Controls: Deploy a Web Application Firewall (WAF) or an Intrusion Prevention System (IPS) rule to inspect and block excessively long input strings sent to the /goform/websHostFilter URI.

Public Exploit Available: Yes — a public proof of concept is available via the researcher write-up on GitHub.

Given the availability of a public proof of concept and the high severity of memory corruption vulnerabilities, this issue should be prioritized for remediation. Administrators must isolate the management interface of the UTT HiPER 1200GW from the public internet immediately and contact the vendor for guidance on firmware updates or security mitigations to protect the integrity of the network perimeter.