CVE-2026-10292: UTT HiPER 1200GW formTaskEdit strcpy stack-based overflow

Synopsis

A stack-based buffer overflow exists in the UTT HiPER 1200GW router firmware (versions up to 2.5.3-170306). The vulnerability is in the formTaskEdit handler, where unsanitized user input is passed directly to strcpy, allowing a remote attacker with a low-privilege account to overwrite the stack. Successful exploitation gives the attacker full control over the affected device, including the ability to read, modify, or destroy data and disrupt service. No fix version has been published; HarborGuard tracks the advisory and will surface patch availability as soon as upstream ships a correction.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable formTaskEdit endpoint is exposed over the network, so an attacker must be able to reach the device's web interface remotely.

• AuthenticationRequired

  The CVSS vector specifies PR:L, meaning a low-privilege account is sufficient; no administrative credentials are needed.

• Victim interactionNot required

  Exploitation is fully attacker-driven and requires no action from any user of the device.

• Attack complexityDetail

  Attack complexity is low (AC:L), meaning the overflow is reliably triggerable with no special preconditions, race conditions, or environmental dependencies.

Blast Radius

• The attacker gains the ability to execute arbitrary code on the device at the privilege level of the affected process, effectively taking full control of the router.
• Confidential data accessible to the device, including network credentials, session tokens, and configuration secrets, can be read directly from memory or storage.
• The attacker can modify persisted router configuration, redirecting or intercepting network traffic passing through the device.
• The affected service can be crashed, causing a denial of service for all network traffic the HiPER 1200GW routes or manages.