A critical buffer overflow vulnerability in UTT HiPER 1250GW routers allows authenticated attackers to trigger memory corruption and denial of service conditions.

The vulnerability exists in the strcpy function within the route/goform/ConfigAdvideo file. An authenticated attacker can submit a crafted Profile argument via a POST request, causing a buffer overflow that results in a denial of service.

The exploitation of this vulnerability can lead to a complete denial of service for the affected networking equipment. Given the CVSS score of 8.8, this represents a high risk to business continuity, as the router is a critical infrastructure component. Unexpected system instability or crashes may disrupt network connectivity for all downstream users and services.

Immediate Action: Since a specific patch version is currently unknown, administrators should restrict management interface access to trusted IP addresses only and monitor for any signs of unauthorized configuration changes.

Proactive Monitoring: Review web server access logs for anomalous POST requests directed at /goform/ConfigAdvideo, specifically looking for abnormally long input strings in the Profile or Action parameters.

Compensating Controls: Implement strict firewall rules to prevent external access to the router administrative interface, ensuring that only internal, authorized personnel can reach the vulnerable endpoint.

Public Exploit Available: Yes, a proof-of-concept exploit is publicly available via a security researcher's technical write-up on GitHub.

Due to the severity of this memory corruption flaw and the availability of public exploit code, immediate mitigation is required. Organizations should prioritize isolating the management interfaces of affected UTT routers from untrusted networks while awaiting official firmware updates from the vendor.