{"id":"CVE-2026-2935","state":"PUBLISHED","title":"UTT HiPER 810G ConfigExceptMSN strcpy buffer overflow","description":"A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/ConfigExceptMSN. Executing a manipulation of the argument remark can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.","publishedAt":"2026-02-22T08:02:11.025Z","updatedAt":"2026-02-25T18:32:41.478Z","severity":{"score":8.6,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["UTT HiPER 810G"],"affected":[{"vendor":"UTT","product":"HiPER 810G","versions":[{"version":"1.7.7-171114","status":"affected"}]}],"references":["https://vuldb.com/?id.347297","https://vuldb.com/?ctiid.347297","https://vuldb.com/?submit.755297","https://github.com/alc9700jmo/CVE/issues/23"],"weaknesses":["CWE-120","CWE-119"],"ingestedAt":"2026-10-29T20:11:31.369Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/2xxx/CVE-2026-2935.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-2935","state":"PUBLISHED","datePublished":"2026-02-22T08:02:11.025Z","dateUpdated":"2026-02-25T18:32:41.478Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-02-21T08:21:46.039Z"},"containers":{"cna":{"title":"UTT HiPER 810G ConfigExceptMSN strcpy buffer overflow","descriptions":[{"lang":"en","value":"A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/ConfigExceptMSN. Executing a manipulation of the argument remark can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks."}],"affected":[{"vendor":"UTT","product":"HiPER 810G","versions":[{"version":"1.7.7-171114","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.347297","name":"VDB-347297 | UTT HiPER 810G ConfigExceptMSN strcpy buffer overflow","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.347297","name":"VDB-347297 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.755297","name":"Submit #755297 | UTT (AiTai) HiPER 810G ≤ v3v1.7.7-171114 Buffer Overflow","tags":["third-party-advisory"]},{"url":"https://github.com/alc9700jmo/CVE/issues/23","tags":["exploit","issue-tracking"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.6,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","baseSeverity":"HIGH"}},{"cvssV3_1":{"version":"3.1","baseScore":7.2,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.2,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":8.3,"vectorString":"AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","type":"CWE","lang":"en","description":"Buffer Overflow"}]},{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"Memory Corruption"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-02-22T08:02:11.025Z"},"timeline":[{"time":"2026-02-21T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-02-21T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-02-21T09:26:53.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"alc9700 (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-25T18:32:29.169411Z","id":"CVE-2026-2935","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-25T18:32:41.478Z"}}]}}}