Cyber Posture

CVE-2026-2904

HighPublic PoC

Published: 22 February 2026

Published
22 February 2026
Modified
24 February 2026
KEV Added
—
Patch
—
CVSS Score 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0011 28.3th percentile
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Description

A vulnerability was determined in UTT HiPER 810G 1.7.7-171114. This affects the function strcpy of the file /goform/ConfigExceptAli. Executing a manipulation can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may…

more

be utilized.

Mitigating Controls (NIST 800-53 r5)AI

SI-2 Flaw Remediation good match
prevent

Mandates timely identification, reporting, and correction of the buffer overflow flaw in the strcpy function of /goform/ConfigExceptAli to eliminate the vulnerability.

SI-10 Information Input Validation good match
prevent

Requires validation of inputs to the vulnerable web form handler to prevent buffer overflows from malicious remote manipulations.

SI-16 Memory Protection good match
prevent

Implements memory protections such as stack canaries, ASLR, and DEP to mitigate exploitation of the buffer overflow even if triggered.

Security SummaryAI

CVE-2026-2904 is a buffer overflow vulnerability in UTT HiPER 810G version 1.7.7-171114. The flaw affects the strcpy function in the file /goform/ConfigExceptAli, where improper input handling allows manipulation leading to a buffer overflow. It is associated with CWE-119 and CWE-120 and carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

The vulnerability enables remote exploitation by an attacker with low privileges (PR:L), requiring low attack complexity and no user interaction. Successful exploitation can result in high impacts to confidentiality, integrity, and availability, potentially allowing arbitrary code execution or system compromise. The exploit has been publicly disclosed and may be utilized.

Advisories detailing the issue are available at https://vuldb.com/?ctiid.347213, https://vuldb.com/?id.347213, https://vuldb.com/?submit.755113, and https://vuln.ricky.place/UTT/HiPER%20810G/. The vulnerability was published on 2026-02-22T01:16:00.797.

Details

CWE(s)
CWE-119CWE-120

Affected Products

utt
810g firmware
≤ 1.7.7-171114

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
attack.mitre.org →
Why these techniques?

Buffer overflow in web management interface (/goform/ConfigExceptAli) of network device enables remote code execution from low privileges (PR:L), directly facilitating T1190 (Exploit Public-Facing Application) and T1068 (Exploitation for Privilege Escalation).

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References