CVE-2026-18895

Summary

The flaw is a stack-based buffer overflow in the strcpy function due to improper handling of the cipher argument, allowing remote attackers to exploit it. This matters because it can lead to arbitrary code execution or other severe impacts.

Exploitability

Exploitation is moderately hard as it requires crafting a specific payload to overflow the buffer, but it can be done remotely.

Blast radius

If exploited, this could result in full control of the device, leading to data theft, denial of service, or other serious consequences.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to UTT HiPER 1250GW version 3.2.8-210907-181000 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.