CVE-2026-11517: UTT HiPER 2610G formConfigDnsFilterGlobal strcpy buffer overflow
A vulnerability was determined in UTT HiPER 2610G up to 3.0.0-171107. This impacts the function strcpy of the file /goform/formConfigDnsFilterGlobal. Executing a manipulation of the argument GroupName can lead to buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable remote web management/administration on the device (if not required) to eliminate remote attack surface for the vulnerable /goform/formConfigDnsFilterGlobal endpoint.
UTT HiPER 2610G web management remote_management = disabled - Compensating control
Restrict access to the device management interfaces to trusted IP addresses only using firewall rules or ACLs; block access from untrusted networks and the public Internet.
- Compensating control
Block or filter HTTP requests targeting the /goform/formConfigDnsFilterGlobal endpoint (for example via a WAF, reverse proxy, or network ACL) to prevent exploitation of the strcpy buffer overflow.
- Operational
Monitor device logs and network traffic for requests to /goform/formConfigDnsFilterGlobal and other indicators of exploitation; apply vendor-supplied patches or updates as soon as they become available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-11517?
CVE-2026-11517 has a high severity rating of 8.8.
How do I fix CVE-2026-11517?
To mitigate CVE-2026-11517, update the UTT HiPER 2610G firmware to version 3.0.0-171108 or later.
What type of vulnerability is CVE-2026-11517?
CVE-2026-11517 is a buffer overflow vulnerability.
Can CVE-2026-11517 be exploited remotely?
Yes, CVE-2026-11517 can be exploited remotely.
What function is affected by CVE-2026-11517?
CVE-2026-11517 affects the strcpy function in the /goform/formConfigDnsFilterGlobal file.