CVE-2026-4318CWE-119CWE-120

UTT HiPER 810G formApLbConfig strcpy buffer overflow

High · published March 17, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
56.9
In the wild
Unconfirmed
What it is

A vulnerability was determined in UTT HiPER 810G up to 1.7.7-171114. Affected is the function strcpy of the file /goform/formApLbConfig. This manipulation of the argument loadBalanceNameOld causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00822 · 56.9th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-03-17T15:02Z
EPSS history
Timeline
  • 17 MAR 15:02Z
    UTT HiPER 810G formApLbConfig strcpy buffer overflow
    cvelistv5