CVE-2026-4488: UTT HiPER 1250GW setSysAdm strcpy buffer overflow
A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected is the function strcpy of the file /goform/setSysAdm. Such manipulation of the argument GroupName leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4488?
CVE-2026-4488 is considered a critical severity vulnerability due to its potential for remote exploitation via a buffer overflow.
How do I fix CVE-2026-4488?
To fix CVE-2026-4488, users should update their UTT HiPER 1250GW devices to a version later than 3.2.7-210907-180535.
What systems are affected by CVE-2026-4488?
CVE-2026-4488 affects the UTT HiPER 1250GW models running versions up to and including 3.2.7-210907-180535.
What is the impact of exploiting CVE-2026-4488?
Exploiting CVE-2026-4488 can allow an attacker to execute arbitrary code on the affected UTT HiPER 1250GW device.
Is a patch available for CVE-2026-4488?
Yes, a patch is available and users are advised to update their systems to mitigate this vulnerability.