CVE-2026-3700CWE-119CWE-120

UTT HiPER 810G formConfigDnsFilterGlobal strcpy buffer overflow

High · published March 8, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigDnsFilterGlobal. This manipulation causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01048 · 63.9th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-03-08T02:32Z
EPSS history
Timeline
  • 08 MAR 02:32Z
    UTT HiPER 810G formConfigDnsFilterGlobal strcpy buffer overflow
    cvelistv5