CVE-2026-4488

High CVSS: 7.4

A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected is the function strcpy of the file /goform/setSysAdm. Such manipulation of the argument GroupName leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Vendor

Product

CWE

CWE-119

Yayın Tarihi

2026-03-20 16:16:19

Güncelleme

2026-03-24 15:54:09

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-119 HIGH 2026

Referanslar

https://github.com/hmKunlun/UTTHiPER/blob/main/HiPER%201250GW.md https://vuldb.com/?ctiid.352011 https://vuldb.com/?id.352011 https://vuldb.com/?submit.773565