PT-2026-21507
CVE-2026-2980
·
Published
2026-01-04
·
Updated
2026-02-28
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
UTT HiPER 810G versions up to 1.7.7-1711
Description
A buffer overflow issue exists in the
strcpy function within the /goform/setSysAdm file. The manipulation of the passwd1 argument can trigger this issue. This allows for remote exploitation. The exploit has been publicly disclosed.Recommendations
Versions prior to 1.7.7-1711 should be updated. As a temporary workaround, consider restricting access to the
/goform/setSysAdm file to minimize the risk of exploitation. Avoid manipulating the passwd1 argument.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾