CVE-2026-3699CWE-119CWE-120

UTT HiPER 810G formRemoteControl strcpy buffer overflow

High · published March 8, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

A security flaw has been discovered in UTT HiPER 810G up to 1.7.7-171114. This impacts the function strcpy of the file /goform/formRemoteControl. The manipulation results in buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01048 · 63.9th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-03-08T02:32Z
EPSS history
Timeline
  • 08 MAR 02:32Z
    UTT HiPER 810G formRemoteControl strcpy buffer overflow
    cvelistv5