CVE-2026-101039
CriticalCVSS 10.0Summary
A vulnerability was identified in FAST FAC1900R version 20190827_2.0.2.2 in the copy_msg_element function of the devdiscover Service component. Manipulation leads to a stack-based buffer overflow, and the attack can be executed remotely. The exploit is publicly available and may be used; the vendor did not respond to the disclosure.
Risk Assessment
A remote attacker could exploit the buffer overflow to execute arbitrary code or cause a device crash, potentially taking control of the network device. Since the exploit is public, the risk is high.
Recommendation
Due to the vendor's lack of response and the publicly available exploit, it is recommended to isolate the device from public networks, restrict access to the devdiscover service, and consider replacing the device with a supported model.
Other vulnerabilities in FAST FAC1900R
Original NVD description (English source)
A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS