Yecp

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 1200GW versions prior to 2.5.3-170306 **Description** A buffer overflow exists in the `strcpy()` function within the `/goform/formConfigFastDirectionW` file. A remote attacker can trigger this issue by manipulating the `ssid` argument. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than that buffer is allowed to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** Update UTT HiPER 1200GW to a version newer than 2.5.3-170306. As a temporary mitigation, restrict access to the `/goform/formConfigFastDirectionW` endpoint to prevent remote manipulation of the `ssid` argument.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 **Description** An issue exists in the HTTP Request Handler component where a stack-based buffer overflow occurs. This happens when the `strcpy()` function in the '/goform/aspRemoteApConfTempSend' endpoint processes a manipulated `Profile` argument. This flaw allows for remote exploitation. **Recommendations** Update UTT HiPER 1250GW to a version newer than 3.2.7-210907-180535. As a temporary mitigation, restrict access to the '/goform/aspRemoteApConfTempSend' endpoint.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 **Description** A stack-based buffer overflow exists in the HTTP Handler component. The issue occurs within the `strcpy()` function located in the `/goform/aspApBasicConfigUrcp` file. A remote attacker can trigger this by manipulating the `pvid` argument. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** Update UTT HiPER 1250GW to a version newer than 3.2.7-210907-180535. As a temporary mitigation, restrict access to the `/goform/aspApBasicConfigUrcp` endpoint.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 1200GW versions prior to 2.5.3-170306 **Description** A remote stack-based buffer overflow exists in the `strcpy()` function within the `/goform/formGroupConfig` file. This issue occurs when the `timestart` argument is manipulated, potentially allowing an attacker to overflow the stack memory. **Recommendations** Update to a version newer than 2.5.3-170306. As a temporary mitigation, restrict access to the `/goform/formGroupConfig` endpoint to prevent remote manipulation of the `timestart` argument.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 1200GW versions prior to 2.5.3-170306 **Description** A remote attack is possible due to a stack-based buffer overflow in the `strcpy()` function within the `/goform/pptpSrvGlobalConfig` file. This occurs when the `EncryptionMode` argument is manipulated. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/pptpSrvGlobalConfig` file or avoid using the `EncryptionMode` argument.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 **Description** A remote attack is possible due to a stack-based buffer overflow in the `strcpy()` function within the `/goform/getOneApConfTempEntry` file. This occurs when the `tempName` argument is manipulated. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/getOneApConfTempEntry` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 **Description** A stack-based buffer overflow occurs in the `strcpy()` function within the `/goform/APSecurity 5g` file. This issue can be triggered remotely by manipulating the `cipher` argument. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 1200GW versions prior to 2.5.3-170306 **Description** A remote attack is possible due to a stack-based buffer overflow in the `strcpy()` function within the `/goform/ConfigAdvideo` file. This occurs when the `timestart` argument is manipulated. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 810G versions up to 1.7.7-1711 **Description** A buffer overflow condition exists in the `strcpy` function within the `/goform/formTaskEdit ap` file of UTT HiPER 810G. The issue stems from manipulating the `txtMin2` argument. This allows for remote attacks. The exploit for this issue has been publicly released. **Recommendations** Versions prior to 1.7.7-1711 should be updated. As a temporary workaround, consider restricting the use of the `strcpy` function within the `/goform/formTaskEdit ap` file until a patch is available. Avoid using the `txtMin2` argument in the affected file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER versions up to 1.7.7-171114 **Description** A flaw exists in UTT HiPER that allows for a buffer overflow. This is due to the use of the `strcpy` function within the `/goform/formConfigDnsFilterGlobal` file. Remote exploitation is possible. The exploit for this issue has been publicly released. **Recommendations** Versions prior to 1.7.7-171114 should be updated. As a temporary workaround, consider restricting access to the `/goform/formConfigDnsFilterGlobal` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 810G versions up to 1.7.7-171114 **Description** A buffer overflow issue exists in UTT HiPER 810G up to version 1.7.7-171114. The flaw is located in the `strcpy` function within the `/goform/formRemoteControl` file. This allows for remote attacks through buffer overflow manipulation. The exploit for this issue has been publicly released. **Recommendations** Versions prior to 1.7.7-171114 should be updated. As a temporary workaround, consider restricting access to the `/goform/formRemoteControl` file.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 810G versions through 1.7.7-171114 **Description** A buffer overflow issue exists in the `strcpy` function within the `/goform/NTP` file. Remote attackers can exploit this by manipulating the function, potentially leading to a compromise of the system. The exploit is publicly available. **Recommendations** Versions prior to 1.7.7-171114 should be updated. As a temporary workaround, consider restricting access to the `/goform/NTP` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 810G versions up to 1.7.7-1711 **Description** A buffer overflow issue exists in the `strcpy` function within the `/goform/setSysAdm` file. The manipulation of the `passwd1` argument can trigger this issue. This allows for remote exploitation. The exploit has been publicly disclosed. **Recommendations** Versions prior to 1.7.7-1711 should be updated. As a temporary workaround, consider restricting access to the `/goform/setSysAdm` file to minimize the risk of exploitation. Avoid manipulating the `passwd1` argument.