CVE-2026-14721: UTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-based overflow
A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an unknown function of the file /goform/ConfigWirelessBase5g of the component Web Endpoint. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
UTT HiPER 1250GW Web Endpoint (ConfigWirelessBase_5g)to a version that resolves this vulnerability.Fixed in 3.2.7-210907-180535 - Compensating control
Restrict access to the UTT HiPER 1250GW Web Endpoint so that the /goform/ConfigWirelessBase_5g handler cannot be reached remotely (e.g., limit management/Web access to trusted networks or block it at the firewall/WAF/ACL).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14721?
CVE-2026-14721 has a severity rating of high with a score of 8.8.
How do I fix CVE-2026-14721?
Mitigation for CVE-2026-14721 involves updating the UTT HiPER 1250GW Web Endpoint to version 3.2.7-210907-180535 or higher.
What type of vulnerability is CVE-2026-14721?
CVE-2026-14721 is classified as a stack-based buffer overflow vulnerability.
Which component is affected by CVE-2026-14721?
CVE-2026-14721 affects the Web Endpoint component of the UTT HiPER 1250GW device.
What could an attacker potentially achieve by exploiting CVE-2026-14721?
An attacker could potentially execute arbitrary code or crash the device through the buffer overflow in CVE-2026-14721.