CVE-2026-3814:

Buffer overflow vulnerability in UTT HiPER 810G up to version 1.7.7-1711 allows remote attackers to execute arbitrary code.

Score
A numerical rating that indicates how dangerous this vulnerability is.

8.8High

Published Date:Mar 9, 2026
CISA KEV Date:*No Data*
Industries Affected:20

Threat Predictions

EPSS Score:0.1
EPSS Percentile:26%

Exploitability

Score:2.8
Attack Vector:NETWORK
Attack Complexity:LOW
Privileges Required:LOW
User Interaction:NONE
Scope:UNCHANGED

Impact

Score:5.9
Confidentiality Impact:HIGH
Integrity Impact:HIGH
Availability Impact:HIGH

Description Preview

Buffer overflow vulnerability in UTT HiPER 810G up to version 1.7.7-1711 allows remote attackers to execute arbitrary code.

Overview

The vulnerability in UTT HiPER 810G is classified as a buffer overflow, specifically related to CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-120 (Buffer Copy without Checking Size of Input). It affects the network-accessible strcpy function in the /goform/getOneApConfTempEntry file. The CVSS v3.1 base score is 8.8 (High), indicating a significant risk. The vulnerability requires low attack complexity and privileges, with no user interaction needed. It can potentially impact the confidentiality, integrity, and availability of the affected system.

Remediation

To mitigate this vulnerability, the following steps are recommended:
Update the UTT HiPER 810G firmware to a version newer than 1.7.7-1711 if available. Monitor the vendor's website for security updates and apply them promptly.
If an update is not immediately available, consider implementing network segmentation to limit access to the affected devices. Restrict network access to the management interface of these devices to trusted IP addresses only.
Regularly monitor system logs for any suspicious activities that might indicate exploitation attempts. Implement strong access controls and authentication mechanisms for all network devices.
Consider using input validation and proper bounds checking in custom applications interacting with the affected devices to prevent potential buffer overflow exploits.