These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A stack-based buffer overflow vulnerability exists in the UTT HiPER 1250GW router firmware through version 3.2.7-210907-180535. The vulnerability resides in the `strcpy` function within the `/goform/formGroupConfig` endpoint of the Web Management Interface. An attacker with low privileges can remotely trigger the overflow by manipulating the `Profile` argument, potentially achieving high impact on confide [truncated]
A stack-based buffer overflow vulnerability exists in UTT HiPER 1250GW devices running firmware up to version 3.2.7-210907-180535. The vulnerability resides in the `strcpy` function within the `/goform/formConfigFastDirectionW` endpoint of the web management interface. An attacker can exploit this by manipulating the `Profile` argument, leading to remote code execution. The CVSS 4.0 score of 7.4 (HIGH) re [truncated]
A stack-based buffer overflow vulnerability exists in the UTT HiPER 1200GW router firmware through version 2.5.3-170306. The vulnerability resides in the `/goform/formPptpClientConfig` endpoint of the Web Management Interface, where multiple PPTP configuration parameters—including server address, username, password, and tunnel name—are susceptible to improper bounds checking. Successful exploitation could [truncated]