PT-2026-21507

CVE-2026-2980

·

Published

2026-01-04

·

Updated

2026-02-28

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions UTT HiPER 810G versions up to 1.7.7-1711
Description A buffer overflow issue exists in the strcpy function within the /goform/setSysAdm file. The manipulation of the passwd1 argument can trigger this issue. This allows for remote exploitation. The exploit has been publicly disclosed.
Recommendations Versions prior to 1.7.7-1711 should be updated. As a temporary workaround, consider restricting access to the /goform/setSysAdm file to minimize the risk of exploitation. Avoid manipulating the passwd1 argument.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾