Skip to content
CVSS 8.8 · HIGH

CVE-2026-7512

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-1703. The affected element is the function strcpy of the file /goform/formUser. Executing a manipulation can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.

Ver en NVD

Análisis

This vulnerability affects a specific model of UTT HiPER enterprise routers, which are not common in the Mexican development or cloud infrastructure landscape. While the exploit is public and allows remote code execution, the hardware's niche deployment makes it irrelevant to most community members.

Severidad

Puntaje: 8.8(HIGH)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AV: NETWORK
AC: LOW
PR: LOW
UI: NONE
S: UNCHANGED
C: HIGH
I: HIGH
A: HIGH
Tipo de falla (CWE): CWE-119CWE-120

EPSS

Probabilidad de explotación (próx. 30 días): 0.0005 (0.0%)
Percentil: 13.9%
EPSS: 2026-05-06

Descripción técnica

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-1703. The affected element is the function strcpy of the file /goform/formUser. Executing a manipulation can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.

Publicada: 1/5/2026, 0:16:25
Última modificación: 1/5/2026, 15:26:24

Referencias

InicioEventosBlogRecursosEquipo