CVE-2026-4862

7.4 highEPSS 0.5%

High (7.4). EPSS 0.5% chance of exploitation in the next 30 days.

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file /goform/formConfigDnsFilterGlobal of the component Parameter Handler. Such manipulation of the argument GroupName leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Severity

CVSS 4.0

7.4 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWEs: CWE-119, CWE-120
Published: 2026-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/kirlic123/IOTvulner/blob/main/309-1/5.md
https://vuldb.com/?ctiid.353193
https://vuldb.com/?id.353193
https://vuldb.com/?submit.776230

Check your stack JSON