VulnerabilityAnalyzed
CVE-2026-2935
A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114.
HIGH 7.3EPSS 0.80%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.80%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/ConfigExceptMSN. Executing a manipulation of the argument remark can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
- CVSS 4.0
- 7.3 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.80% probability · 55th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119, CWE-120
- Affected
- utt/810g firmware
- Source
- cna@vuldb.com
References
- https://github.com/alc9700jmo/CVE/issues/23Exploit, Issue Tracking, Mitigation, Third Party Advisory
- https://vuldb.com/?ctiid.347297Permissions Required, VDB Entry
- https://vuldb.com/?id.347297Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.755297Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.