CVE-2026-18895
Received Received - Intake

Stack-Based Buffer Overflow in UTT HiPER 1250GW

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: VulDB

Description
A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-05
Last Modified
2026-08-05
Generated
2026-08-05
AI Q&A
2026-08-05
EPSS Evaluated
N/A
NVD
CVE-2026-18895
EUVD
EUVD-2026-53019

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
utt hiper_1250gw to 3.2.7-210907-180535 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-18895 is a stack-based buffer overflow vulnerability in the UTT HiPER 1250GW router firmware up to version 3.2.7-210907-180535. It occurs in the strcpy function of the /goform/APSecurity_5g file when the cipher argument is manipulated. This allows remote attackers to cause a buffer overflow by sending a crafted HTTP request.

Detection Guidance

To detect this vulnerability, monitor network traffic for HTTP POST requests to the /goform/APSecurity_5g endpoint with unusually long parameters like pskPsswd. Check router logs for crashes or unusual activity. Use tools like Wireshark to inspect traffic for malformed requests targeting this endpoint.

Impact Analysis

This vulnerability can be exploited remotely without authentication to cause a denial of service or potentially execute arbitrary code on the affected router. An attacker could take control of the device, intercept network traffic, or use it as a pivot point for further attacks within the network.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a specific router model (UTT HiPER 1250GW) with a stack-based buffer overflow issue. Compliance impacts would depend on how the affected device is used in a system handling regulated data.

Mitigation Strategies

Immediately update the UTT HiPER 1250GW firmware to the latest version if available. If no update exists, restrict access to the /goform/APSecurity_5g endpoint via firewall rules. Disable remote administration and monitor for suspicious activity. Consider replacing the device if no patch is released.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18895. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart