CVE-2026-2086CWE-119CWE-120

UTT HiPER 810G Management formFireWall strcpy buffer overflow

High · published February 7, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
52.8
In the wild
Unconfirmed
What it is

⚡ A remote buffer overflow lurking in UTT HiPER 810G could turn your network device into a hacker's playground! Think of it like a busy restaurant kitchen where a chef keeps adding more and more ingredients to a stew without checking the pot's capacity — eventually, it spills over, causing a huge mess. In this case, the 'GroupName' argument is overflowing, and it could let attackers interfere with the device's management interface. An attacker could exploit this vulnerability to gain unauthorized access and execute arbitrary code, potentially taking control of your device. This could lead to data breaches, network disruptions, or even turning your device into a launching pad for further attacks. Yikes!

Put simply

Think of it like a busy restaurant kitchen where a chef keeps adding more and more ingredients to a stew without checking the pot's capacity — eventually, it spills over, causing a huge mess. In this case, the 'GroupName' argument is overflowing, and it could let attackers interfere with the device's management interface. This vulnerability arises from the improper handling of the 'strcpy' function within the management interface, specifically in how it processes the 'GroupName' argument, leading to a buffer overflow.

What to do

An attacker could exploit this vulnerability to gain unauthorized access and execute arbitrary code, potentially taking control of your device. This could lead to data breaches, network disruptions, or even turning your device into a launching pad for further attacks. Yikes! Immediately upgrade to version 1.7.8 or later to patch this vulnerability. Ensure that any firewall configurations are reviewed and hardened against potential exploits. Regularly monitor for any unusual activity in your network devices as an additional precaution. You've got this! With the right updates, you can secure your network and keep those hackers at bay! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00704 · 52.8th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-07T13:32Z
EPSS history
Timeline
  • 07 FEB 13:32Z
    UTT HiPER 810G Management formFireWall strcpy buffer overflow
    cvelistv5