CVE-2026-1162CWE-119CWE-120

UTT HiPER 810 setSysAdm strcpy buffer overflow

Critical · published January 19, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

🚨 A sneaky buffer overflow lurks in UTT HiPER 810 1.7.4-141218, ready to be exploited from the outside! 🔥 Think of this like a waiter bringing you an overflowing dish at a restaurant. If the plate can’t hold everything, the food spills everywhere; this flaw lets attackers overflow data into unguarded areas, compromising the whole meal (or system!). An attacker could gain unauthorized access to sensitive system settings, leading to a complete takeover of your device. This could allow them to read, modify, or delete critical data, leaving you in a dire situation. Imagine an intruder walking right into your server room and wreaking havoc!

Put simply

Think of this like a waiter bringing you an overflowing dish at a restaurant. If the plate can’t hold everything, the food spills everywhere; this flaw lets attackers overflow data into unguarded areas, compromising the whole meal (or system!). This vulnerability occurs in the strcpy function within the /goform/setSysAdm file, where improper validation of the 'passwd1' argument leads to a buffer overflow, allowing remote code execution by an attacker.

What to do

An attacker could gain unauthorized access to sensitive system settings, leading to a complete takeover of your device. This could allow them to read, modify, or delete critical data, leaving you in a dire situation. Imagine an intruder walking right into your server room and wreaking havoc! Immediately patch to version 1.7.4-141219 or later to address this critical flaw. Review your system's access controls and consider implementing additional input validation measures to prevent buffer overflows in the future. You've got this! With these steps, you can secure your system and keep those attackers at bay! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00810 · 56.5th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-19T16:32Z
EPSS history
Timeline
  • 19 JAN 16:32Z
    UTT HiPER 810 setSysAdm strcpy buffer overflow
    cvelistv5