CVE-2026-6186

HIGH

UTT HiPER 1200GW formNatStaticMap strcpy buffer overflow

Title source: cna

Description

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This vulnerability affects the function strcpy of the file /goform/formNatStaticMap. The manipulation of the argument NatBind leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

References (4)

[Vdb Entry, Technical Description] https://vuldb.com/vuln/357108

[Signature, Permissions Required] https://vuldb.com/vuln/357108/cti

[Third Party Advisory] https://vuldb.com/submit/797304

[Exploit] https://github.com/lin-3-start/lin-cve/blob/main/Amao/1.md

View Exploit ZIP pw:eip

Scores

CVSS v3 8.8

EPSS 0.0005

EPSS Percentile 14.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119 CWE-120

Status published

Products (1)

UTT/HiPER 1200GW 2.5.3-170306

Published Apr 13, 2026

Tracked Since Apr 13, 2026