CVE-2026-76004

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535

Description A stack-based buffer overflow exists in the HTTP Handler component. The issue occurs within the strcpy() function located in the /goform/aspApBasicConfigUrcp file. A remote attacker can trigger this by manipulating the pvid argument. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution.

Recommendations Update UTT HiPER 1250GW to a version newer than 3.2.7-210907-180535. As a temporary mitigation, restrict access to the /goform/aspApBasicConfigUrcp endpoint.