A critical buffer overflow vulnerability in the UTT HiPER 1200GW router allows remote authenticated attackers to execute arbitrary code or cause system crashes.

This memory corruption vulnerability stems from a buffer overflow in the strcpy function located in the /goform/formUser file. The vulnerability is exploitable remotely by an attacker with low-level privileges.

Successful exploitation of this buffer overflow can lead to a complete compromise of the affected network device. Given the CVSS score of 8.8, this represents a high-severity risk that could allow unauthorized actors to intercept traffic, pivot into internal network segments, or render critical infrastructure unavailable, leading to significant operational disruption.

Immediate Action: Since a specific patch version is currently unavailable, administrators should restrict access to the web management interface of the HiPER 1200GW to trusted internal IP addresses only.

Proactive Monitoring: Monitor system logs for unusual crashes or repeated access attempts to the /goform/formUser endpoint, which may indicate exploitation efforts.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to inspect and block requests to the vulnerable /goform/formUser endpoint that contain abnormally large input strings.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the GitHub repository referenced by the CVE record.

Given the high CVSS score and the public availability of a proof-of-concept, this vulnerability poses a credible threat to organizations utilizing the UTT HiPER 1200GW. We recommend immediate isolation of the device management interface from external networks and continuous monitoring for signs of compromise until a vendor-supplied firmware update can be applied.