CVE-2026-9627

7.4 highEPSS 0.5%

High (7.4). EPSS 0.5% chance of exploitation in the next 30 days.

A security flaw has been discovered in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/setSysAdm of the component Web Management Interface. The manipulation of the argument sysAdmUser/sysAdmPass results in buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Severity

CVSS 4.0

7.4 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWEs: CWE-119, CWE-120
Published: 2026-05-27
Modified: 2026-07-24
Record from: the NVD, synced 2026-10-19

References

https://github.com/zhouguobing-maker/cve/blob/main/9.md
https://vuldb.com/submit/818374
https://vuldb.com/vuln/365683
https://vuldb.com/vuln/365683/cti

Check your stack JSON