PT-2026-26627 · Utt · Hiper 1250Gw

Kunlun · Published 2026-03-20 · Updated 2026-03-20 · CVE-2026-4488

Mitre

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected is the function strcpy of the file /goform/setSysAdm. Such manipulation of the argument GroupName leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-4488

Affected Products

Hiper 1250Gw

References · 7

• 🔥 https://github.com/hmKunlun/UTTHiPER/blob/main/HiPER%201250GW.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4488 · Security Note
• https://vuldb.com/?ctiid.352011 · Note
• https://twitter.com/CveFindCom/status/2035034352044699667 · Twitter Post
• https://vuldb.com/?submit.773565 · Note
• https://vuldb.com/?id.352011 · Note
• https://twitter.com/cyberbivash/status/2035035713545081062 · Twitter Post