A buffer overflow vulnerability exists in the UTT HiPER 1250GW router, which could allow an authenticated attacker to cause a denial of service or potentially execute unauthorized code.

This vulnerability is a buffer overflow (CWE-120) triggered by the improper use of the strcpy function within the /goform/formConfigDnsFilterGlobal endpoint. An authenticated attacker can supply a maliciously crafted GroupName argument to corrupt memory, leading to a denial of service.

The exploitation of this vulnerability can lead to a complete denial of service for the affected router, which serves as a critical network gateway. Given the CVSS score of 8.8, this flaw represents a significant risk to network availability. If the device is used to manage sensitive traffic or security policies, its compromise could severely impact business operations and the integrity of the network perimeter.

Immediate Action: As no official patch is currently available, administrators should restrict network access to the management interface of the UTT HiPER 1250GW to trusted internal IP addresses only.

Proactive Monitoring: Monitor device logs for repeated crashes or unusual POST requests directed at the /goform/formConfigDnsFilterGlobal endpoint, which may indicate exploitation attempts.

Compensating Controls: Implement a Web Application Firewall or network access control list to filter traffic and block overly large or malformed inputs to the vulnerable GroupName parameter.

Public Exploit Available: Yes, a published proof of concept exists, as documented in the research writeup provided by the vulnerability reporter.

Given the confirmed existence of a public proof of concept and the high CVSS severity, this vulnerability poses a credible risk to infrastructure stability. Organizations must prioritize restricting management access to the device immediately and monitor vendor channels for the release of a firmware update to permanently remediate this memory corruption flaw.