UTT HiPER 810G: Unsecured Copy Function Allows Remote Data Overflow

Summary

A security weakness in UTT HiPER 810G versions up to 1.7.7-1711 makes it possible for hackers to send malicious data that can cause the device to behave unexpectedly. This could be done remotely, and a publicly available exploit exists, so it's essential to take action to protect your device.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
utt	810g_firmware	<= 1.7.7-171114	–

Original title

A weakness has been identified in UTT HiPER 810G up to 1.7.7-1711. This affects the function strcpy of the file /goform/formApMail. Executing a manipulation can lead to buffer overflow. It is possi...

Original description

A weakness has been identified in UTT HiPER 810G up to 1.7.7-1711. This affects the function strcpy of the file /goform/formApMail. Executing a manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

nvd CVSS2.0 9.0

nvd CVSS3.1 8.8

nvd CVSS4.0 7.4

Vulnerability type

CWE-119 Buffer Overflow

CWE-120 Classic Buffer Overflow