CVE-2026-2935
UTT HiPER 810G ConfigExceptMSN strcpy buffer overflow
- State
- Published
- Severity
- 8.6 High
- Published
- Feb 22, 2026
- Updated
- Feb 25, 2026
- Reserved
- Feb 21, 2026
Description
A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/ConfigExceptMSN. Executing a manipulation of the argument remark can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.6 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 7.2 High | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 3.0 | 7.2 High | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 2.0 | 8.3 High | AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
HiPER 810GUTT |
|
References
- VDB-347297 | UTT HiPER 810G ConfigExceptMSN strcpy buffer overflowvdb-entrytechnical-description
- VDB-347297 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #755297 | UTT (AiTai) HiPER 810G ≤ v3v1.7.7-171114 Buffer Overflowthird-party-advisory
- https://github.com/alc9700jmo/CVE/issues/23exploitissue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.