CVE-2026-7418: UTT HiPER 1250GW NTP strcpy buffer overflow
A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535. This vulnerability affects the function strcpy of the file route/goform/NTP. Executing a manipulation of the argument Profile can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7418?
CVE-2026-7418 is classified as a high-severity vulnerability due to the potential for a buffer overflow leading to remote code execution.
How do I fix CVE-2026-7418?
To mitigate CVE-2026-7418, upgrade the UTT HiPER 1250GW to a version later than 3.2.7-210907-180535.
What specific function is affected by CVE-2026-7418?
CVE-2026-7418 affects the strcpy function in the route/goform/NTP file.
What could an attacker achieve by exploiting CVE-2026-7418?
An attacker exploiting CVE-2026-7418 could execute arbitrary code on the affected system due to the buffer overflow.
Which devices are vulnerable to CVE-2026-7418?
Devices running the UTT HiPER 1250GW firmware version up to and including 3.2.7-210907-180535 are vulnerable to CVE-2026-7418.