CVE-2026-78170 UTT CVE debrief

Who should care

Defenders responsible for UTT HiPER 1200GW devices should assess exposure and prioritize verification and patching to prevent exploitation. Defenders should verify versions, monitor for exploitation attempts, and review network configurations to prevent exploitation. The vulnerability can be triggered remotely, and defenders should prioritize verifying the version of UTT HiPER 1200GW and applying patches or mitigations to prevent exploitation.

Why it matters

CVE-2026-78170 is a buffer overflow vulnerability in UTT HiPER 1200GW devices. Defenders should verify versions, monitor for exploitation attempts, and review network configurations to prevent exploitation.

• Verify version and apply patches to prevent exploitation
• Monitor for potential exploitation attempts
• Review network configurations to prevent remote access to the vulnerable function

Technical summary

The vulnerability is located in the strcpy function of the /goform/formConfigFastDirectionW file in UTT HiPER 1200GW up to version 2.5.3-170306. The issue can be exploited remotely by manipulating the ssid argument, leading to a buffer overflow. The vulnerability details indicate that it is a buffer overflow issue in the strcpy function, which can be exploited remotely. Defenders should prioritize verifying the version of UTT HiPER 1200GW and applying patches or mitigations to prevent exploitation. The exploit has been made public and may be used.

Defensive priority

Defenders should prioritize verifying the version of UTT HiPER 1200GW and applying patches or mitigations to prevent exploitation.

Recommended defensive actions

• Verify the version of UTT HiPER 1200GW and apply patches or mitigations to prevent exploitation
• Monitor for potential exploitation attempts
• Review network configurations to prevent remote access to the vulnerable function
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, including its CVSS score and weaknesses. However, the corpus does not establish versions, exploitation, impact, or remediation beyond what is provided by the official sources. The vulnerability details indicate that it is a buffer overflow issue in the strcpy function, which can be exploited remotely. Defenders should verify the version of UTT HiPER 1200GW and apply patches or mitigations to prevent exploitation. The NVD vulnerability detail and

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.