CVE-2026-10293: UTT HiPER 1200GW formFireWall strcpy stack-based overflow
A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/formFireWall. This manipulation of the argument Profile causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable remote (WAN) web/management access to the device and ensure the /goform/formFireWall administrative endpoint is only reachable from trusted management networks or is disabled if not required.
UTT HiPER 1200GW web management / access to /goform/formFireWall = disable remote/WAN access; limit to trusted LAN or management VLAN - Compensating control
At the network edge, block or restrict access to the /goform/formFireWall path and related management interfaces (HTTP/HTTPS) using firewall/ACL rules. Restrict management ports to specific trusted IPs and consider deploying WAF rules to detect and block exploit attempts targeting the strcpy overflow in /goform/formFireWall.
- Operational
Monitor device logs and network traffic for attempts targeting /goform/formFireWall or related administrative paths. If exploitation is suspected, isolate the device from networks, perform a factory reset or rebuild, and rotate any credentials or keys used by the device. Apply vendor-supplied firmware updates or patches as soon as they become available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10293?
The severity of CVE-2026-10293 is high, with a score of 8.8.
How do I fix CVE-2026-10293?
To fix CVE-2026-10293, upgrade the UTT HiPER 1200GW to version 2.5.3-170307 or later.
What type of vulnerability is CVE-2026-10293?
CVE-2026-10293 is a stack-based buffer overflow vulnerability.
What can attackers do with CVE-2026-10293?
Attackers can remotely exploit CVE-2026-10293 to execute arbitrary code on the affected systems.
Which software is affected by CVE-2026-10293?
The affected software is UTT HiPER 1200GW versions up to 2.5.3-170306.