A critical buffer overflow vulnerability in the UTT HiPER 1250GW router allows unauthenticated remote attackers to execute arbitrary code, presenting a severe risk to network integrity.

This vulnerability is a stack-based buffer overflow occurring within the strcpy function of the /goform/aspRemoteApConfTempSend component. The attack requires low privileges, but can be triggered remotely to cause memory corruption and potential system compromise.

Successful exploitation of this buffer overflow allows an attacker to gain control over the affected network device. This can lead to complete system compromise, enabling attackers to intercept traffic, pivot into the internal network, or disrupt business operations. Given the CVSS score of 9.9, this vulnerability represents an immediate and severe risk to the organization.

Immediate Action: Identify all instances of the UTT HiPER 1250GW in your environment and restrict access to the web management interface from untrusted networks until a patch is applied.

Proactive Monitoring: Review device access logs for suspicious input patterns directed at the /goform/aspRemoteApConfTempSend endpoint, particularly those involving long strings in the Profile parameter.

Compensating Controls: Implement a Web Application Firewall (WAF) or an Intrusion Prevention System (IPS) rule to filter and block requests containing malformed or excessively long arguments intended for the management interface.

Public Exploit Available: No (No confirmed weaponized exploit or public repository identified in curated data).

This vulnerability presents a critical threat to network infrastructure. IT administrators must prioritize the protection of the management interface and verify the availability of firmware updates from the vendor. If a patch is not yet available, complete network isolation of the management interface is the only effective way to mitigate this risk.